Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Ubuntu 22.04 LTS USN-5763-1 Critical: NumPy Denial Of Service

ubuntu
Calendar Grey December 7, 2022
Dist Ubuntu Esm H88
Ubuntu Security Alert USN-5763-1 outlines significant vulnerabilities within NumPy, impacting various distributions and providing necessary remediation steps.
Several security issues were fixed in NumPy.

Summary

Several security issues were fixed in NumPy.

Software Description:

- numpy: scientific computing package with Python

Details:

It was discovered that NumPy did not properly manage memory when specifying

arrays of large dimensions. If a user were tricked into running malicious

Python file, an attacker could cause a denial of service. This issue only

affected Ubuntu 20.04 LTS. (CVE-2021-33430)

It was discovered that NumPy did not properly perform string comparison

operations under certain circumstances. An attacker could possibly use

this issue to cause NumPy to crash, resulting in a denial of service.

(CVE-2021-34141)

It was discovered that NumPy did not properly manage memory under certain

circumstances. An attacker could possibly use this issue to cause NumPy to

crash, resulting in a denial of service. (CVE-2021-41495, CVE-2021-41496)

Topics%20covered

Topics Covered

security advisory denial of service critical attack software issue ubuntu numpy

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.10:
  python3-numpy                   1:1.21.5-1ubuntu22.10.1

Ubuntu 22.04 LTS:
  python3-numpy                   1:1.21.5-1ubuntu22.04.1

Ubuntu 20.04 LTS:
  python3-numpy                   1:1.17.4-5ubuntu3.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5763-1

CVE-2021-33430, CVE-2021-34141, CVE-2021-41495, CVE-2021-41496

Severity
critical
Lowest
Low
Medium
High
Critical

December 07, 2022

Topics%20covered

Topics Covered

security advisory denial of service critical attack software issue ubuntu numpy

Package Information

https://launchpad.net/ubuntu/+source/numpy/1:1.21.5-1ubuntu22.10.1
https://launchpad.net/ubuntu/+source/numpy/1:1.21.5-1ubuntu22.04.1
https://launchpad.net/ubuntu/+source/numpy/1:1.17.4-5ubuntu3.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.