Debian Cvxopt vulnerabilities

1 known vulnerability affecting debian/cvxopt.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2021-41500HIGHCVSS 7.5fixed in cvxopt 1.2.7+dfsg-1 (bookworm)2021

CVE-2021-41500 [HIGH] CVE-2021-41500: cvxopt - Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in... Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in APIs (cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve), which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects. Scope: local bookworm: resolved (fixed in 1.2.7+dfsg-1) bullseye: open forky: resolved (fixed