CVE-2017-12852
Fixed in a distro release EPSS 3%
The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.
Products: numpy
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | numpy | 1.13.3 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise Module for HPC 12 | python-numpy_1_13_3-gnu-hpc | 1.13.3-4.6.1 |
| SUSE Linux Enterprise Server 12 SP5 | python-numpy | 1.8.0-5.19.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python-numpy | 1.8.0-5.19.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | python-numpy | 1.8.0-5.19.1 |
| Ubuntu 16.04 LTS | python-numpy | no fix |
| Ubuntu 18.04 LTS | python-numpy | no fix |
| openSUSE Tumbleweed | python-numpy | 1.21.2-1.1 |
| openSUSE Tumbleweed | python-numpy | 1.26.2-5.1 |
| openSUSE Tumbleweed | python-numpy | 2.4.6-1.1 |
| openSUSE Tumbleweed | python-numpy1 | 1.26.4-1.1 |