2.1
CVSSv2

CVE-2021-41496

Published: 17/12/2021 Updated: 11/04/2024
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 188
Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows malicious users to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

numpy numpy

Vendor Advisories

Several security issues were fixed in NumPy ...
Synopsis Moderate: Red Hat OpenStack Platform 161 (numpy) security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for numpy is now available for Red Hat OpenStack Platform 161(Train)Red Hat Product Sec ...
Synopsis Moderate: Red Hat OpenStack Platform 162 (numpy) security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for numpy is now available for Red Hat OpenStack Platform 162(Train)Red Hat Product Sec ...