QwikSec

Security Database

CVE

CWE

Training

CVE-2021-41500

Published: Dec 17, 2021

Modified: Aug 4, 2024

PUBLISHED

Description

Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in APIs (cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve), which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/cvxopt/cvxopt/issues/193

x_refsource_MISC

FEDORA-2022-0b587f0fa9

vendor-advisory

x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.