CVE-2017-12852: Input Validation
The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-12852?
CVE-2017-12852 has a severity rating that indicates a potential for denial of service due to an infinite loop in the numpy.pad function.
How do I fix CVE-2017-12852?
To fix CVE-2017-12852, upgrade to Numpy version 1.13.2 or later, which includes a patch for the input validation issue.
What vulnerabilities does CVE-2017-12852 exploit?
CVE-2017-12852 exploits the lack of input validation in the numpy.pad function when handling empty lists or ndarrays.
Is CVE-2017-12852 present in the latest versions of Numpy?
No, CVE-2017-12852 is not present in the latest versions of Numpy, as it was addressed in version 1.13.2 and subsequent releases.
Who is affected by CVE-2017-12852?
Users and applications relying on Numpy versions 1.13.1 and older are at risk from CVE-2017-12852.