PT-2023-9417 · Scipy+6 · Scipy+6
Snape3058
·
Published
2023-07-06
·
Updated
2024-12-10
·
CVE-2023-29824
CVSS v2.0
10
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
SciPy versions prior to 1.8.0
Description
A use-after-free issue was discovered in the
Py FindObjects() function. The vendor and discoverer indicate that this is not a security issue. The issue is related to the use of memory after it has been freed, which could potentially allow a remote attacker to impact the confidentiality, integrity, and availability of the system.Recommendations
For SciPy versions prior to 1.8.0, update to version 1.8.0 or later to resolve the issue. As a temporary workaround, consider disabling the
Py FindObjects() function until a patch is available. However, since the vendor and discoverer indicate that this is not a security issue, the primary recommendation is to update to the latest version.Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Debian
Linuxmint
Red Os
Scipy
Suse
Ubuntu