CVE-2021-41496
Fixed in a distro release EPSS <1%
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)
Products: numpy
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | numpy | 1.19 |
| PyPI | numpy | 1.19.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | numpy | no fix |
| Debian 13 | numpy | no fix |
| Debian 14 | numpy | no fix |
| Red Hat openstack 16.1 | numpy | 1:1.17.0-8.el8ost |
| Red Hat openstack 16.1 | numpy-debugsource | 1:1.17.0-8.el8ost |
| Red Hat openstack 16.1 | python3-numpy | 1:1.17.0-8.el8ost |
| Red Hat openstack 16.1 | python3-numpy-debuginfo | 1:1.17.0-8.el8ost |
| Red Hat openstack 16.1 | python3-numpy-f2py | 1:1.17.0-8.el8ost |
| Red Hat openstack 16.2 | numpy | 1:1.17.0-8.el8ost |
| Red Hat openstack 16.2 | numpy-debugsource | 1:1.17.0-8.el8ost |
| Red Hat openstack 16.2 | python3-numpy | 1:1.17.0-8.el8ost |
| Red Hat openstack 16.2 | python3-numpy-debuginfo | 1:1.17.0-8.el8ost |
| Red Hat openstack 16.2 | python3-numpy-f2py | 1:1.17.0-8.el8ost |
| SUSE Enterprise Storage 6 | python-numpy | 1.17.3-10.1 |
| SUSE Enterprise Storage 6 | python2-numpy | 1.16.5-150000.1.9.1 |
| SUSE Enterprise Storage 7 | python-numpy | 1.17.3-10.1 |
| SUSE Enterprise Storage 7 | python2-numpy | 1.16.5-150200.3.5.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | python-numpy | 1.17.3-10.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | python-numpy_1_16_5-gnu-hpc | 1.16.5-150000.1.9.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | python-numpy_1_17_3-gnu-hpc | 1.17.3-10.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | python2-numpy | 1.16.5-150000.1.9.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | python-numpy | 1.17.3-10.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | python-numpy_1_16_5-gnu-hpc | 1.16.5-150000.1.9.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | python-numpy_1_17_3-gnu-hpc | 1.17.3-10.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | python2-numpy | 1.16.5-150000.1.9.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | python-numpy | 1.17.3-10.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | python-numpy_1_16_5-gnu-hpc | 1.16.5-150200.3.5.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | python-numpy_1_17_3-gnu-hpc | 1.17.3-10.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | python2-numpy | 1.16.5-150200.3.5.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | python-numpy | 1.17.3-10.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | python-numpy_1_16_5-gnu-hpc | 1.16.5-150200.3.5.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | python-numpy_1_17_3-gnu-hpc | 1.17.3-10.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | python2-numpy | 1.16.5-150200.3.5.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | python-numpy | 1.17.3-10.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | python-numpy_1_16_5-gnu-hpc | 1.16.5-150000.1.9.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | python-numpy_1_17_3-gnu-hpc | 1.17.3-10.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | python2-numpy | 1.16.5-150000.1.9.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | python-numpy | 1.17.3-10.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | python-numpy_1_16_5-gnu-hpc | 1.16.5-150000.1.9.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | python-numpy_1_17_3-gnu-hpc | 1.17.3-10.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | python2-numpy | 1.16.5-150000.1.9.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | python-numpy | 1.17.3-10.1 |
| SUSE Linux Enterprise Module for HPC 12 | python-numpy_1_13_3-gnu-hpc | 1.13.3-4.12.1 |
| SUSE Linux Enterprise Module for HPC 15 SP3 | python-numpy_1_16_5-gnu-hpc | 1.16.5-150200.3.5.1 |
| SUSE Linux Enterprise Module for HPC 15 SP3 | python-numpy_1_17_3-gnu-hpc | 1.17.3-10.1 |
| SUSE Linux Enterprise Module for Python 2 15 SP3 | python2-numpy | 1.16.5-150200.3.5.1 |
| SUSE Linux Enterprise Real Time 15 SP2 | python-numpy | 1.17.3-10.1 |
| SUSE Linux Enterprise Real Time 15 SP2 | python-numpy_1_17_3-gnu-hpc | 1.17.3-10.1 |
| SUSE Linux Enterprise Server 12 SP5 | python-numpy | 1.8.0-5.11.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | python-numpy | 1.17.3-10.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | python2-numpy | 1.16.5-150000.1.9.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | python-numpy | 1.17.3-10.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | python2-numpy | 1.16.5-150000.1.9.1 |
| SUSE Linux Enterprise Server 15 SP2-BCL | python-numpy | 1.17.3-10.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | python-numpy | 1.17.3-10.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | python2-numpy | 1.16.5-150200.3.5.1 |
| SUSE Linux Enterprise Server 15-LTSS | python-numpy | 1.17.3-10.1 |
| SUSE Linux Enterprise Server 15-LTSS | python2-numpy | 1.16.5-150000.1.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python-numpy | 1.8.0-5.11.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | python-numpy | 1.17.3-10.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | python2-numpy | 1.16.5-150000.1.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | python-numpy | 1.17.3-10.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | python2-numpy | 1.16.5-150000.1.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | python-numpy | 1.17.3-10.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | python2-numpy | 1.16.5-150200.3.5.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | python-numpy | 1.8.0-5.11.1 |
| SUSE Manager Proxy 4.1 | python-numpy | 1.17.3-10.1 |
| SUSE Manager Proxy 4.1 | python2-numpy | 1.16.5-150200.3.5.1 |
| SUSE Manager Retail Branch Server 4.1 | python-numpy | 1.17.3-10.1 |
| SUSE Manager Retail Branch Server 4.1 | python2-numpy | 1.16.5-150200.3.5.1 |
| SUSE Manager Server 4.1 | python-numpy | 1.17.3-10.1 |
| SUSE Manager Server 4.1 | python2-numpy | 1.16.5-150200.3.5.1 |
| SUSE Package Hub 15 SP3 | dxflib | 3.17.0-bp153.2.3.1 |
| Ubuntu 20.04 LTS | numpy | 1:1.17.4-5ubuntu3.1 |
| Ubuntu 22.04 LTS | numpy | 1:1.21.5-1ubuntu22.04.1 |
| openSUSE Leap 15.3 | dxflib | 3.17.0-bp153.2.3.1 |
| openSUSE Leap 15.3 | python-numpy | 1.17.3-10.1 |
| openSUSE Leap 15.3 | python-numpy_1_16_5-gnu-hpc | 1.16.5-150200.3.5.1 |
| openSUSE Leap 15.3 | python-numpy_1_17_3-gnu-hpc | 1.17.3-10.1 |
| openSUSE Leap 15.3 | python2-numpy | 1.16.5-150200.3.5.1 |
| openSUSE Leap 15.4 | python-numpy_1_16_5-gnu-hpc | 1.16.5-150200.3.5.1 |
| openSUSE Tumbleweed | python-numpy | 2.4.6-1.1 |
| openSUSE Tumbleweed | python-numpy | 1.25.2-2.1 |
| openSUSE Tumbleweed | python-numpy1 | 1.26.4-1.1 |