Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Gentoo GLSA 202301-03 Low Severity: Scikit-Learn Denial of Service

gentoo
Calendar Grey January 11, 2023
Dist Gentoo Esm H88
Update scikit-learn to address Denial of Service vulnerabilities as outlined in Gentoo advisory 202301-03. Essential information enclosed.
A vulnerability was found in scikit-learn which could result in denial of service.

Summary

When supplied with a crafted model SVM, predict() can result in a null pointer dereference.

Topics%20covered

Topics Covered

security advisory denial of service gentoo low severity scikit-learn

Resolution

All scikit-learn users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=sci-libs/scikit-learn-1.1.1"

References

[ 1 ] CVE-2020-28975 https://nvd.nist.gov/vuln/detail/CVE-2020-28975

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202301-03
style>.gentoo_availability{display:block;}

Concerns

Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.

Severity
low
Lowest
Low
Medium
High
Critical

Severity: Low
Title: scikit-learn: Denial of Service
Date: January 11, 2023
Bugs: #758323
ID: 202301-03

Topics%20covered

Topics Covered

security advisory denial of service gentoo low severity scikit-learn

Synopsis

A vulnerability was found in scikit-learn which could result in denial of service.

Background

scikit-learn is a machine learning library for Python.

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 sci-libs/scikit-learn < 1.1.1 >= 1.1.1

Impact

===== An attcker capable of providing a crafted model to scikit-learn can result in denial of service.

Workaround

There is no known workaround at this time.

Related News

Your message here