The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or     ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.
    (CVE-2017-12852)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3954-1 advisory.

  - The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or     ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.
    (CVE-2017-12852)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the python package has been released.

ID	Name	Product	Family	Severity
220700	Linux Distros Unpatched Vulnerability : CVE-2017-12852	Nessus	Misc.	high
167350	SUSE SLES12 Security Update : python-numpy (SUSE-SU-2022:3954-1)	Nessus	SuSE Local Security Checks	high
152052	Photon OS 1.0: Python PHSA-2021-1.0-0416	Nessus	PhotonOS Local Security Checks	high
152050	Photon OS 2.0: Python PHSA-2021-2.0-0371	Nessus	PhotonOS Local Security Checks	high

Detections

Analytics

CVE-2017-12852

high

Tenable Plugins

high

high

high

high