CVE-2023-25399: Medium severity scipy scipy vulnerability
Withdrawn Advisory
This advisory has been withdrawn because it has been found to not be an issue. Please see the issue here for more information.
Original Description
A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in PyFindObjects() function.
Other sources
A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in PyFindObjects() function.
— Ubuntu
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/scipyto a version that resolves this vulnerability.Fixed in 1.3.3-3ubuntu0.1~ - Upgrade
Upgrade
ubuntu/scipyto a version that resolves this vulnerability.Fixed in 1.8.0-1 - Upgrade
Upgrade
ubuntu/scipyto a version that resolves this vulnerability.Fixed in 1.8.1-10ubuntu0.22.10.1 - Upgrade
Upgrade
debian/scipyto a version that resolves this vulnerability.Fixed in 1.10.1-2Fixed in 1.10.1-10 - Upgrade
Upgrade
pip/scipyto a version that resolves this vulnerability.Fixed in 1.10.0
Event History
Frequently Asked Questions
What is the severity of CVE-2023-25399?
CVE-2023-25399 has been withdrawn as it was found not to be an issue.
How do I fix CVE-2023-25399?
As CVE-2023-25399 has been withdrawn, no fixes are needed.
Which versions of SciPy are affected by CVE-2023-25399?
CVE-2023-25399 originally targeted certain versions of SciPy but has been withdrawn.
Is there a patch available for CVE-2023-25399?
There is no patch available for CVE-2023-25399 as it was determined not to be a vulnerability.
What should I do if I am using the affected versions of SciPy related to CVE-2023-25399?
Since CVE-2023-25399 has been withdrawn, you do not need to take any action regarding the affected versions.