CVE-2013-4251: High severity scipy vulnerability
Published Nov 4, 2019
·Updated
The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.
Other sources
The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.
Affected Software
10 affected componentsFixes available
debian/python-scipy
pip/scipy<0.12.1
0.12.1
scipy scipy<0.12.1
Fedoraproject Fedora=18
Fedoraproject Fedora=19
Fedoraproject Fedora=20
redhat Enterprise Linux=6.0
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Remediation
Patch Available
Event History
Nov 4, 2019
CVE Published
via MITRE·07:21 PM
Data Sourced
via MITRE·07:21 PM
DescriptionWeakness
May 5, 2022
Advisory Published
via GitHub·12:28 AM
Aug 6, 2024
Data Sourced
via Debian·04:44 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-4251?
CVE-2013-4251 is classified as a medium severity vulnerability due to its potential to lead to insecure temporary directories.
2
How do I fix CVE-2013-4251?
To fix CVE-2013-4251, upgrade to SciPy version 0.12.1 or later.
3
Which versions of SciPy are affected by CVE-2013-4251?
CVE-2013-4251 affects all versions of SciPy prior to 0.12.1.
4
What component is impacted by CVE-2013-4251?
The CVE-2013-4251 vulnerability impacts the scipy.weave component of SciPy.
5
Is CVE-2013-4251 related to Linux distributions?
Yes, CVE-2013-4251 affects multiple Linux distributions including Debian and Fedora when using older versions of SciPy.