CVE-2017-12852 Numpy missing input validation
HighCVSS 7.5
EPSS 2.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi numpy(PyPI) | < 1.13.3 | 1.13.3 |
| pypi numpy(PyPI) | = 0.9.6 | No fix listed |
| pypi numpy(PyPI) | = 0.9.8 | No fix listed |
| pypi numpy(PyPI) | = 1.0 | No fix listed |
| pypi numpy(PyPI) | = 1.0.3 | No fix listed |
| pypi numpy(PyPI) | = 1.0.4 | No fix listed |
| pypi numpy(PyPI) | = 1.0b1 | No fix listed |
| pypi numpy(PyPI) | = 1.0b4 | No fix listed |
| pypi numpy(PyPI) | = 1.0b5 | No fix listed |
| pypi numpy(PyPI) | = 1.0rc1 | No fix listed |
| pypi numpy(PyPI) | = 1.0rc2 | No fix listed |
| pypi numpy(PyPI) | = 1.0rc3 | No fix listed |
| pypi numpy(PyPI) | = 1.1.1 | No fix listed |
| pypi numpy(PyPI) | = 1.10.0 | No fix listed |
| pypi numpy(PyPI) | = 1.10.1 | No fix listed |
| pypi numpy(PyPI) | = 1.10.2 | No fix listed |
| pypi numpy(PyPI) | = 1.10.3 | No fix listed |
| pypi numpy(PyPI) | = 1.10.4 | No fix listed |
| pypi numpy(PyPI) | = 1.11.0 | No fix listed |
| pypi numpy(PyPI) | = 1.11.1 | No fix listed |
| pypi numpy(PyPI) | = 1.11.2 | No fix listed |
| pypi numpy(PyPI) | = 1.11.3 | No fix listed |
| pypi numpy(PyPI) | = 1.12.0 | No fix listed |
| pypi numpy(PyPI) | = 1.12.1 | No fix listed |
| pypi numpy(PyPI) | = 1.13.0 | No fix listed |
Show 24 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi numpy(PyPI) | = 1.13.1 | No fix listed |
| pypi numpy(PyPI) | = 1.2.0 | No fix listed |
| pypi numpy(PyPI) | = 1.2.1 | No fix listed |
| pypi numpy(PyPI) | = 1.3.0 | No fix listed |
| pypi numpy(PyPI) | = 1.4.0 | No fix listed |
| pypi numpy(PyPI) | = 1.4.1 | No fix listed |
| pypi numpy(PyPI) | = 1.5.0 | No fix listed |
| pypi numpy(PyPI) | = 1.5.1 | No fix listed |
| pypi numpy(PyPI) | = 1.6.0 | No fix listed |
| pypi numpy(PyPI) | = 1.6.1 | No fix listed |
| pypi numpy(PyPI) | = 1.6.2 | No fix listed |
| pypi numpy(PyPI) | = 1.7.0 | No fix listed |
| pypi numpy(PyPI) | = 1.7.1 | No fix listed |
| pypi numpy(PyPI) | = 1.7.2 | No fix listed |
| pypi numpy(PyPI) | = 1.8.0 | No fix listed |
| pypi numpy(PyPI) | = 1.8.1 | No fix listed |
| pypi numpy(PyPI) | = 1.8.2 | No fix listed |
| pypi numpy(PyPI) | = 1.9.0 | No fix listed |
| pypi numpy(PyPI) | = 1.9.1 | No fix listed |
| pypi numpy(PyPI) | = 1.9.2 | No fix listed |
| pypi numpy(PyPI) | = 1.9.3 | No fix listed |
| pypi numpy(PyPI) | = 1.13.0rc1 | No fix listed |
| pypi numpy(PyPI) | = 1.13.0rc2 | No fix listed |
| numpy | <= 1.13.1 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com exploit issue-tracking third-party-advisory
- github.com exploit
- github.com
- github.com vendor-advisory
- github.com
- github.com product