UBUNTU-CVE-2017-12852

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2017-12852
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2017/UBUNTU-CVE-2017-12852.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2017-12852
Upstream
Published
2017-08-15T16:29:00Z
Modified
2025-07-18T16:44:06Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
  • Ubuntu - low
Summary
[none]
Details

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.

References

Affected packages

Ubuntu:Pro:16.04:LTS / python-numpy

Package

Name
python-numpy
Purl
pkg:deb/ubuntu/python-numpy@1:1.11.0-1ubuntu1?arch=source&distro=esm-infra/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:1.*

1:1.8.2-1ubuntu2
1:1.8.2-1ubuntu3
1:1.10.4-2ubuntu2
1:1.11.0-1ubuntu1

Ubuntu:Pro:18.04:LTS / python-numpy

Package

Name
python-numpy
Purl
pkg:deb/ubuntu/python-numpy@1:1.13.3-2ubuntu1?arch=source&distro=esm-infra/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:1.*

1:1.12.1-3.1ubuntu4
1:1.13.3-0ubuntu1
1:1.13.3-1ubuntu1
1:1.13.3-1ubuntu2
1:1.13.3-2ubuntu1