USN-5763-1: numpy Ubuntu
Vulnerability summary
USN-5763-1 is a vulnerability in numpy Ubuntu with no CVSS score yet.
Advisory lineage
Upstream 4 · Downstream 0 · Related 4Timeline
- 07-12-2022PublishedVulnerability first disclosed.
- 10-02-2026Last modifiedVulnerability information updated.
Description
numpy vulnerabilities It was discovered that NumPy did not properly manage memory when specifying arrays of large dimensions. If a user were tricked into running malicious Python file, an attacker could cause a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-33430) It was discovered that NumPy did not properly perform string comparison operations under certain circumstances. An attacker could possibly use this issue to cause NumPy to crash, resulting in a denial of service. (CVE-2021-34141) It was discovered that NumPy did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause NumPy to crash, resulting in a denial of service. (CVE-2021-41495, CVE-2021-41496)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu1 product
- numpy< 1:1.17.4-5ubuntu3.1 | < 1:1.21.5-1ubuntu22.04.1
1 vendor · 1 product