Wind River Support Network

HomeDefectsLIN1018-8508
Fixed

LIN1018-8508 : Security Advisory - python-numpy - CVE-2021-41495

Created: Dec 20, 2021    Updated: Jul 31, 2022
Resolved Date: Feb 24, 2022
Found In Version: 10.18.44.1
Fix Version: 10.18.44.26
Severity: Standard
Applicable for: Wind River Linux LTS 18
Component/s: Userspace

Description

Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays.

CVEs


Live chat
Online