CVE-2021-41495 NumPy NULL Pointer Dereference
A null pointer dereference in NumPy's sort function allows denial of service via memory exhaustion, though exploitation is practically difficult.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-41495?
CVE-2021-41495 is a medium-severity vulnerability in n/a, published on 17 Dec 2021. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Null Pointer Dereference vulnerability exists in numpy.sort in NumPy < and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error can only occur due to an exhaustion of memory. If the user can exhaust memory, they are already privileged. Further, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place
Weakness: CWE-476
Which versions are affected by CVE-2021-41495?
3 open source packages ship an affected version, including numpy. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
numpy PyPI | All versions | 1.19 |
numpy PyPI | All versions | 1.19 |
numpy PyPI | All versions | 1.19.1 |
Linux distribution packages (23)
numpy Red Hat:openstack:16.1::el8 | All versions | 1:1.17.0-11.el8ost |
numpy-debugsource Red Hat:openstack:16.1::el8 | All versions | 1:1.17.0-11.el8ost |
python3-numpy Red Hat:openstack:16.1::el8 | All versions | 1:1.17.0-11.el8ost |
python3-numpy-debuginfo Red Hat:openstack:16.1::el8 | All versions | 1:1.17.0-11.el8ost |
python3-numpy-f2py Red Hat:openstack:16.1::el8 | All versions | 1:1.17.0-11.el8ost |
numpy Red Hat:openstack:16.2::el8 | All versions | 1:1.17.0-11.el8ost |
numpy-debugsource Red Hat:openstack:16.2::el8 | All versions | 1:1.17.0-11.el8ost |
python3-numpy Red Hat:openstack:16.2::el8 | All versions | 1:1.17.0-11.el8ost |
python3-numpy-debuginfo Red Hat:openstack:16.2::el8 | All versions | 1:1.17.0-11.el8ost |
python3-numpy-f2py Red Hat:openstack:16.2::el8 | All versions | 1:1.17.0-11.el8ost |
python-numpy SUSE:Linux Enterprise Module for Basesystem 15 SP4 | All versions | 1.17.3-150400.23.3.1 |
python3-numpy SUSE:Linux Enterprise Module for Basesystem 15 SP6 | All versions | 1.17.3-150400.31.1 |
python-numpy_1_13_3-gnu-hpc SUSE:Linux Enterprise Module for HPC 12 | All versions | 1.13.3-4.15.1 |
python-numpy_1_17_3-gnu-hpc SUSE:Linux Enterprise Module for HPC 15 SP4 | All versions | 1.17.3-150400.23.3.1 |
python-numpy_1_17_3-gnu-hpc SUSE:Linux Enterprise Module for HPC 15 SP6 | All versions | 1.17.3-150400.31.1 |
python-numpy_1_17_3-gnu-hpc SUSE:Linux Enterprise Module for Package Hub 15 SP6 | All versions | 1.17.3-150400.31.1 |
python-numpy SUSE:Linux Enterprise Server 12 SP5 | All versions | 1.8.0-5.14.1 |
python-numpy SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 1.8.0-5.14.1 |
python-numpy SUSE:Linux Enterprise Software Development Kit 12 SP5 | All versions | 1.8.0-5.14.1 |
python-numpy openSUSE:Leap 15.4 | All versions | 1.17.3-150400.23.3.1 |
python-numpy_1_17_3-gnu-hpc openSUSE:Leap 15.4 | All versions | 1.17.3-150400.23.3.1 |
python-numpy_1_17_3-gnu-hpc openSUSE:Leap 15.6 | All versions | 1.17.3-150400.31.1 |
python3-numpy openSUSE:Leap 15.6 | All versions | 1.17.3-150400.31.1 |
Products include Numpy Numpy.
How do I fix CVE-2021-41495?
Upgrade numpy to a fixed version for your release line: 1.19 or 1.19.1.
Is CVE-2021-41495 being exploited?
There is no known exploitation of CVE-2021-41495 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as AZL-7045, CLSA-2026-1789474848, DEBIAN-CVE-2021-41495, ECHO-02e5-0070-f939, GHSA-5545-2q6w-2gh6, MINI-q54x-3m42-wwgx and 8 more.