CVE-2021-34141
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2021-34141
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-34141.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-34141
- Aliases
- Related
- Published
- 2021-12-17T19:15:07Z
- Modified
- 2024-08-01T07:56:43.796104Z
- Severity
-
- 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
- Summary
- [none]
- Details
-
An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."
- References
Affected packages
Debian:11 / numpy
Package
- Name
- numpy
- Purl
- pkg:deb/debian/numpy?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
1:1.*
1:1.19.5-1
1:1.20.0-1
1:1.20.2-1
1:1.21.2-1
1:1.21.2-2
1:1.21.2-3
1:1.21.4-1
1:1.21.4-2
1:1.21.5-1
1:1.21.5-2
1:1.22.1-1
1:1.23.1-1
1:1.23.2-1
1:1.23.3-1
1:1.23.5-1
1:1.23.5-2
1:1.24.0-1
1:1.24.1-1
1:1.24.1-2
1:1.24.2-1~hurd.1
1:1.24.2-1
1:1.24.2-2
1:1.24.2-2+hurd.1
1:1.24.2-3
1:1.26.3-1
1:1.26.3-2
1:1.26.4+ds-1
1:1.26.4+ds-2
1:1.26.4+ds-3
1:1.26.4+ds-4
1:1.26.4+ds-5
1:1.26.4+ds-6
1:1.26.4+ds-7
1:1.26.4+ds-8
1:1.26.4+ds-9~exp1
1:1.26.4+ds-9
1:1.26.4+ds-10
1:1.26.4+ds-11
Debian:12 / numpy
Package
- Name
- numpy
- Purl
- pkg:deb/debian/numpy?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Debian:13 / numpy
Package
- Name
- numpy
- Purl
- pkg:deb/debian/numpy?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected