ZeroHour

CVE-2017-12852

PoC
CVSS 3.0
7.5 high
EPSS
3%p85
Published
()
Modified
Description

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.

Vendors
numpy
Products
numpy
Weakness
CWE-835
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.