CVE-2014-1858

CVE-2014-1858 affects NumPy’s f2py (init .py) prior to 1.8.1. It allows local users to write to arbitrary files via a symlink attack on a temporary file, potentially enabling file overwrite on the system. This is documented in the CVE record and corroborated by multiple advisories and a GHSA entr...

CVE-2014-1859

CVE-2014-1859 affects NumPy up to version 1.8.1 and allows local users to write to arbitrary files via a symlink attack on a temporary file. The vulnerable components listed in the CVE entry are: core/tests/test_memmap.py, core/tests/test_multiarray.py, f2py/f2py2e.py, and lib/tests/test_io.py. T...

CVE-2014-1859

Removed by vendor...

CVE-2014-1859

1 core/tests/testmemmap.py, 2 core/tests/testmultiarray.py, 3 f2py/f2py2e.py, and 4 lib/tests/testio.py in NumPy before 1.8.1 allow local users to write to arbitrary files via a symlink attack on a temporary file...

CVE-2014-1858

init.py in f2py in NumPy before 1.8.1 allows local users to write to arbitrary files via a symlink attack on a temporary file...

CVE-2014-1858

Removed by vendor...

CVE-2014-1858: Improper Input Validation

init.py in f2py in NumPy before 1.8.1 allows local users to write to arbitrary files via a symlink attack on a temporary file...

CVE-2014-1859: Improper Link Resolution Before File Access

1 core/tests/testmemmap.py, 2 core/tests/testmultiarray.py, 3 f2py/f2py2e.py, and 4 lib/tests/testio.py in NumPy before 1.8.1 allow local users to write to arbitrary files via a symlink attack on a temporary file...

SUSE-RU-2017:3010-1 Initial release of python-numpy for HPC (v1.13.3, gcc)

This update introduces the NumPy packages version 1.13.3 built for environment modules to the HPC module FATE321709. NumPy is a general-purpose array-processing package for Python designed to manipulate large multi-dimensional arrays of arbitrary records. It also provides basic facilities for...

CVE-2017-12852

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack...

Numpy 'numpy.pad' function denial of service vulnerability

NumPy is a Python scientific computing package developed by the NumPy contributors that includes a powerful N-dimensional array object, useful linear algebra, Fourier transform, and random number generation functions, and other features. A security vulnerability exists in the 'numpy.pad' function...

Denial Of Service (DoS) Through Infinite Loop

numpy is vulnerable to denial of service DoS attacks. These attacks are possible because the numpy.pad function is missing some validation, allowing an empty list or a ndarray to cause an infinite loop...

CVE-2017-12852

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack...

CVE-2017-12852

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack...

Input validation

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack...

CVE-2017-12852

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack...

CVE-2017-12852

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack...

PYSEC-2017-1

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack...

UBUNTU-CVE-2017-12852

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack...

PYSEC-2017-1

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack...