Summary
It was discovered that SciPy did not properly manage memory operations
during reference counting. An attacker could possibly use this issue to
cause a denial of service. (CVE-2023-25399)
A use-after-free was discovered in SciPy when handling reference counts. An
attacker could possibly use this to cause a denial of service. This issue
only affected Ubuntu 20.04 LTS. (CVE-2023-29824)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | scipy | 1.3.3-3ubuntu0.1~esm1 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | scipy | 1.8.0-1exp2ubuntu1+esm1 |
Vulnerabilities 2
-
Critical 9.8
A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor a…
-
Medium 5.5
A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() …