Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2021-41500 →
DEBIAN-CVE-2021-41500
Incomplete string comparison vulnerability exits in cvxopt.org cvxop
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in APIs (cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve), which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
cvxopt
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.7+dfsg-1"}]}]
Debian:13
cvxopt
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.7+dfsg-1"}]}]
Debian:14
cvxopt
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.7+dfsg-1"}]}]
Références
- advisory security-tracker.debian.org