NULL pointer dereference in Numpy - CVE-2021-41495

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU61605

NULL pointer dereference in Numpy - CVE-2021-41495

Published: March 24, 2022


Vulnerability identifier: #VU61605
CSH Severity: Low
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-41495
CWE-ID: CWE-476
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in numpy.sort in NumPy. A remote attacker can perform a denial of service (DoS) attack.


Affected software

Numpy
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Enterprise Storage
Red Hat Enterprise Linux for x86_64
SUSE Linux Enterprise Module for HPC
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Module for Python2
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Basesystem
SUSE Package Hub 15
HPC Module
Basesystem Module
openSUSE Leap
openEuler
Ubuntu
Oracle Database Server
python-numpy
python-numpy-devel
python-numpy-debugsource
python-numpy-debuginfo
python-numpy_1_13_3-gnu-hpc
python-numpy_1_13_3-gnu-hpc-debuginfo
python-numpy_1_13_3-gnu-hpc-debugsource
python-numpy_1_13_3-gnu-hpc-devel
python2-numpy-gnu-hpc
python2-numpy-gnu-hpc-devel
python3-numpy-gnu-hpc
python3-numpy-gnu-hpc-devel
python3-numpy_1_13_3-gnu-hpc
python3-numpy_1_13_3-gnu-hpc-debuginfo
python3-numpy_1_13_3-gnu-hpc-devel
python2-numpy-f2py
python2-numpy
numpy-debugsource
numpy-debuginfo
python3-numpy-f2py
python3-numpy
numpy
python2-numpy-debuginfo
python2-numpy_1_16_5-gnu-hpc-devel
python2-numpy_1_16_5-gnu-hpc-debuginfo
python2-numpy_1_16_5-gnu-hpc
python2-numpy-devel
python2-numpy-debugsource
python-numpy_1_16_5-gnu-hpc-debugsource
numpy (Red Hat package)
python-numpy_1_17_3-gnu-hpc-debugsource
python3-numpy_1_17_3-gnu-hpc-devel
python3-numpy_1_17_3-gnu-hpc-debuginfo
python3-numpy_1_17_3-gnu-hpc
python3-numpy-devel
python3-numpy-debuginfo
python3-numpy-debugsource
python3-numpy (Ubuntu package)
Red Hat OpenStack

How to mitigate CVE-2021-41495

Cybersecurity Help is currently unaware of any official solution to address this vulnerability..

python-numpy - update to 1.8.0-5.14.1
python-numpy-devel - update to 1.8.0-5.14.1
python-numpy-debugsource - addressed in versions 1.8.0-5.14.1, 1.17.3-150400.23.3.1
python-numpy-debuginfo - update to 1.8.0-5.14.1
python-numpy_1_13_3-gnu-hpc - update to 1.13.3-4.15.1
python-numpy_1_13_3-gnu-hpc-debuginfo - update to 1.13.3-4.15.1
python-numpy_1_13_3-gnu-hpc-debugsource - update to 1.13.3-4.15.1
python-numpy_1_13_3-gnu-hpc-devel - update to 1.13.3-4.15.1
python2-numpy-gnu-hpc - addressed in versions 1.13.3-4.15.1, 1.16.5-150000.1.9.1, 1.16.5-150200.3.5.1
python2-numpy-gnu-hpc-devel - addressed in versions 1.13.3-4.15.1, 1.16.5-150000.1.9.1, 1.16.5-150200.3.5.1
python3-numpy-gnu-hpc - addressed in versions 1.13.3-4.15.1, 1.17.3-150400.23.3.1, 1.17.3-150400.31.1
python3-numpy-gnu-hpc-devel - addressed in versions 1.13.3-4.15.1, 1.17.3-150400.23.3.1, 1.17.3-150400.31.1
python3-numpy_1_13_3-gnu-hpc - update to 1.13.3-4.15.1
python3-numpy_1_13_3-gnu-hpc-debuginfo - update to 1.13.3-4.15.1
python3-numpy_1_13_3-gnu-hpc-devel - update to 1.13.3-4.15.1
python2-numpy-f2py - update to 1.16.5-6
python2-numpy - update to 1.16.5-6
numpy-debugsource - update to 1.16.5-6
numpy-debuginfo - update to 1.16.5-6
python3-numpy-f2py - update to 1.16.5-6
python3-numpy - update to 1.16.5-6
numpy - update to 1.16.5-6
python2-numpy - addressed in versions 1.16.5-150000.1.9.1, 1.16.5-150200.3.5.1
python2-numpy-debuginfo - addressed in versions 1.16.5-150000.1.9.1, 1.16.5-150200.3.5.1
python2-numpy_1_16_5-gnu-hpc-devel - addressed in versions 1.16.5-150000.1.9.1, 1.16.5-150200.3.5.1
python2-numpy_1_16_5-gnu-hpc-debuginfo - addressed in versions 1.16.5-150000.1.9.1, 1.16.5-150200.3.5.1
python2-numpy_1_16_5-gnu-hpc - addressed in versions 1.16.5-150000.1.9.1, 1.16.5-150200.3.5.1
python2-numpy-devel - addressed in versions 1.16.5-150000.1.9.1, 1.16.5-150200.3.5.1
python2-numpy-debugsource - addressed in versions 1.16.5-150000.1.9.1, 1.16.5-150200.3.5.1
python-numpy_1_16_5-gnu-hpc-debugsource - update to 1.16.5-150200.3.5.1
numpy (Red Hat package) - update to 1.17.0-11.el8ost
python-numpy_1_17_3-gnu-hpc-debugsource - addressed in versions 1.17.3-150400.23.3.1, 1.17.3-150400.31.1
python3-numpy - addressed in versions 1.17.3-150400.23.3.1, 1.17.3-150400.31.1
python3-numpy_1_17_3-gnu-hpc-devel - addressed in versions 1.17.3-150400.23.3.1, 1.17.3-150400.31.1
python3-numpy_1_17_3-gnu-hpc-debuginfo - addressed in versions 1.17.3-150400.23.3.1, 1.17.3-150400.31.1
python3-numpy_1_17_3-gnu-hpc - addressed in versions 1.17.3-150400.23.3.1, 1.17.3-150400.31.1
python3-numpy-devel - addressed in versions 1.17.3-150400.23.3.1, 1.17.3-150400.31.1
python3-numpy-debuginfo - addressed in versions 1.17.3-150400.23.3.1, 1.17.3-150400.31.1
python3-numpy-debugsource - update to 1.17.3-150400.31.1
python3-numpy (Ubuntu package) - addressed in versions 1:1.17.4-5ubuntu3.1, 1:1.21.5-1ubuntu22.04.1, 1:1.21.5-1ubuntu22.10.1
Red Hat OpenStack - addressed in versions 16.1.9, 16.2.4

External References

Related Security Bulletins