DEBIAN-CVE-2023-29824

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/CVE-2023-29824

Import Source

https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-29824.json

JSON Data

https://api.osv.dev/v1/vulns/DEBIAN-CVE-2023-29824

Upstream

CVE-2023-29824

Published

2023-07-06T21:15:09.060Z

Modified

2025-11-20T10:16:36.128234Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.

References

https://security-tracker.debian.org/tracker/CVE-2023-29824

Affected packages

Debian:11 / scipy

Package

Name: scipy
Purl: pkg:deb/debian/scipy?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.6.0-2

1.6.1-1

1.6.2-1

1.7.0-1

1.7.1-1

1.7.1-2

1.7.3-1

1.7.3-2

1.7.3-3~1exp1

1.8.0-1exp1

1.8.0-1exp2

1.8.1-1

1.8.1-2

1.8.1-3

1.8.1-4

1.8.1-5

1.8.1-6

1.8.1-7

1.8.1-8

1.8.1-9

1.8.1-10

1.8.1-11

1.8.1-12

1.8.1-13

1.8.1-14

1.8.1-15

1.8.1-16

1.8.1-17

1.8.1-18

1.8.1-19

1.8.1-20

1.8.1-21

1.8.1-22

1.10.0-1exp1

1.10.0-1exp2

1.10.0-1exp3

1.10.0-1exp4

1.10.0-1exp5

1.10.0-1exp6

1.10.0-2

1.10.0-3

1.10.0-4

1.10.0-5

1.10.0-6

1.10.0-7

1.10.0-8

1.10.0-9

1.10.0-10

1.10.0-11

1.10.0-12

1.10.1-1

1.10.1-2

1.10.1-3

1.10.1-4

1.10.1-5

1.10.1-6

1.10.1-7

1.10.1-8

1.10.1-9

1.10.1-10

1.11.1-1exp1

1.11.1-1exp2

1.11.4-1

1.11.4-2

1.11.4-3

1.11.4-4

1.11.4-5

1.11.4-6

1.11.4-7

1.11.4-8

1.11.4-9

1.11.4-10

1.12.0-1exp1

1.12.0-1exp2

1.12.0-1exp3

1.12.0-2

1.13.1-1exp1

1.13.1-1exp2

1.13.1-1exp3

1.13.1-1exp4

1.13.1-1exp5

1.13.1-1exp6

1.13.1-1exp7

1.13.1-1exp8

1.13.1-1exp9

1.13.1-1exp10

1.13.1-1exp11

1.13.1-1exp12

1.13.1-1exp13

1.13.1-1exp14

1.13.1-1exp15

1.13.1-2

1.13.1-3

1.13.1-4

1.13.1-5

1.13.1-6

1.14.0-1exp1

1.14.0-1exp2

1.14.0-1exp3

1.14.0-1exp4

1.14.0-1exp5

1.14.1-1exp1

1.14.1-2

1.14.1-3

1.14.1-4

1.15.1-1exp1

1.15.1-1exp2

1.15.1-1exp3

1.15.2-1exp1

1.15.2-1exp2

1.15.2-1exp3

1.15.2-1exp4

1.15.2-1exp5

1.15.2-1exp6

1.15.2-1exp7

1.15.2-2

1.15.2-3

1.15.2-4

1.15.2-5

1.15.2-6

1.15.2-7

1.15.2-8

1.15.3-1

1.15.3-1.1

1.16.0-1exp1

1.16.0-1exp2

1.16.0-1exp3

1.16.0-1exp4

1.16.0-1exp5

1.16.0-1exp6

1.16.0-1exp7

1.16.2-1exp1

1.16.2-1exp2

1.16.2-2

1.16.2-3

1.16.2-4

1.16.2-5

1.16.3-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-29824.json"

Debian:12 / scipy

Package

Name: scipy
Purl: pkg:deb/debian/scipy?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.1-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-29824.json"

Debian:13 / scipy

Package

Name: scipy
Purl: pkg:deb/debian/scipy?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.1-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-29824.json"

Debian:14 / scipy

Package

Name: scipy
Purl: pkg:deb/debian/scipy?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.1-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-29824.json"