Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6226-1
HistoryJul 13, 2023 - 12:00 a.m.

SciPy vulnerabilities

2023-07-1300:00:00
ubuntu.com
39
scipy
memory operations
denial of service
ubuntu 22.10
ubuntu 22.04 lts
ubuntu 20.04 lts
use-after-free
cve-2023-25399
cve-2023-29824

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.2%

JSON

Releases

  • Ubuntu 22.10
  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS

Packages

  • scipy - scientific library for Python - documentation

Details

It was discovered that SciPy did not properly manage memory operations
during reference counting. An attacker could possibly use this issue to
cause a denial of service. (CVE-2023-25399)

A use-after-free was discovered in SciPy when handling reference counts. An
attacker could possibly use this to cause a denial of service. This issue
only affected Ubuntu 20.04 LTS. (CVE-2023-29824)

OSVersionArchitecturePackageVersionFilename
Ubuntu22.10noarchpython3-scipy< 1.8.1-10ubuntu0.22.10.1UNKNOWN
Ubuntu22.10noarchpython-scipy-doc< 1.8.1-10ubuntu0.22.10.1UNKNOWN
Ubuntu22.10noarchpython3-scipy-dbgsym< 1.8.1-10ubuntu0.22.10.1UNKNOWN
Ubuntu22.04noarchpython3-scipy< 1.8.0-1exp2ubuntu1+esm1UNKNOWN
Ubuntu22.04noarchpython-scipy-doc< 1.8.0-1exp2ubuntu1UNKNOWN
Ubuntu22.04noarchpython3-scipy< 1.8.0-1exp2ubuntu1UNKNOWN
Ubuntu22.04noarchpython3-scipy-dbgsym< 1.8.0-1exp2ubuntu1UNKNOWN
Ubuntu20.04noarchpython3-scipy< 1.3.3-3ubuntu0.1~esm1UNKNOWN
Ubuntu20.04noarchpython-scipy-doc< 1.3.3-3build1UNKNOWN
Ubuntu20.04noarchpython3-scipy< 1.3.3-3build1UNKNOWN
Rows per page:
1-10 of 111

Related

osv 6
openvas 18
nessus 25
ibm 5
redhatcve 2
prion 2
ubuntucve 2
cvelist 2
vulnrichment 1
mageia 1
github 2
debiancve 2
cve 2
nvd 2
amazon 1
redhat 3
osv
osv
scipy vulnerabilities
2023-07-13 03:58:14
CVE-2023-25399
2023-07-05 17:15:09
PYSEC-2023-102
2023-07-05 17:15:00
openvas
openvas
openSUSE: Security Advisory for python (SUSE-SU-2023:2970-1)
2024-03-04 00:00:00
Huawei EulerOS: Security Advisory for scipy (EulerOS-SA-2023-3454)
2023-12-15 00:00:00
Huawei EulerOS: Security Advisory for scipy (EulerOS-SA-2023-3094)
2023-11-01 00:00:00
nessus
nessus
RHEL 8 : scipy (Unpatched Vulnerability)
2024-06-03 00:00:00
EulerOS 2.0 SP10 : scipy (EulerOS-SA-2023-3230)
2024-01-16 00:00:00
EulerOS 2.0 SP8 : scipy (EulerOS-SA-2023-3158)
2024-01-16 00:00:00
ibm
ibm
Security Bulletin: Multiple security vulnerabilities affecting Watson Knowledge Catalog for IBM Cloud Pak for Data
2023-09-26 15:01:41
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service due to [CVE-2023-25399]
2023-07-10 14:02:32
Security Bulletin: Scipy is vulnerable to CVE-2023-25399 used in IBM Maximo Application Suite - Monitor Component
2024-02-20 18:30:04
redhatcve
redhatcve
CVE-2023-25399
2023-07-19 11:07:44
CVE-2023-29824
2023-07-19 10:52:49
prion
prion
Memory corruption
2023-07-05 17:15:00
Design/Logic Flaw
2023-07-06 21:15:00
ubuntucve
ubuntucve
CVE-2023-25399
2023-07-06 00:00:00
CVE-2023-29824
2023-07-06 00:00:00
cvelist
cvelist
CVE-2023-25399
2023-07-05 00:00:00
CVE-2023-29824
2023-07-06 00:00:00
vulnrichment
vulnrichment
CVE-2023-25399
2023-07-05 00:00:00
mageia
mageia
Updated python-scipy packages fix security vulnerability
2024-03-21 07:56:12
github
github
Withdrawn: scipy memory leak vulnerability
2023-07-05 18:30:44
Withdrawn: Use after free in SciPy
2023-07-06 21:30:28
debiancve
debiancve
CVE-2023-25399
2023-07-05 17:15:09
CVE-2023-29824
2023-07-06 21:15:09
cve
cve
CVE-2023-25399
2023-07-05 17:15:09
CVE-2023-29824
2023-07-06 21:15:09
nvd
nvd
CVE-2023-25399
2023-07-05 17:15:09
CVE-2023-29824
2023-07-06 21:15:09
amazon
amazon
Medium: scipy
2023-07-20 17:29:00
redhat
redhat
(RHSA-2023:5009) Important: OpenShift Container Platform 4.14.0 security update
2023-10-31 13:47:24
(RHSA-2023:5672) Important: OpenShift Container Platform 4.13.17 bug fix and security update
2023-10-17 18:04:26
(RHSA-2023:5006) Important: OpenShift Container Platform 4.14.0 bug fix and security update
2023-10-31 12:52:06

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.2%

JSON
Related for USN-6226-1
osv6openvas18nessus25ibm5redhatcve2prion2ubuntucve2cvelist2vulnrichment1mageia1github2debiancve2cve2nvd2amazon1redhat3