CVE-2021-33430
NumPy Buffer Overflow (Disputed)
A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dimensions (over 32) from Python code, which could let a malicious user cause a Denial of Service. NOTE: The vendor does not agree this is a vulneraility; In (very limited) circumstances a user may be able provoke the buffer overflow, the user is most likely already privileged to at least provoke denial of service by exhausting memory. Triggering this further requires the use of uncommon API (complicated structured dtypes), which is very unlikely to be available to an unprivileged user
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
5.3
A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dimensions (over 32) from Python code, which could let a malicious user cause a Denial of Service. NOTE: The vendor does not agree this is a vulneraility; In (very limited) circumstances a user may be able provoke the buffer overflow, the user is most likely already privileged to at least provoke denial of service by exhausting memory. Triggering this further requires the use of uncommon API (complicated structured dtypes), which is very unlikely to be available to an unprivileged user
- Record
CVE-2021-33430- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:N/I:N/A:P - Weakness
- CWE-120
- Updated
- 2026-11-02
CVE List No score
A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dimensions (over 32) from Python code, which could let a malicious user cause a Denial of Service. NOTE: The vendor does not agree this is a vulneraility; In (very limited) circumstances a user may be able provoke the buffer overflow, the user is most likely already privileged to at least provoke denial of service by exhausting memory. Triggering this further requires the use of uncommon API (complicated structured dtypes), which is very unlikely to be available to an unprivileged user
- Record
CVE-2021-33430- Updated
- 2026-11-02
EUVDEUVD-2021-0150 No score
A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dimensions (over 32) from Python code, which could let a malicious user cause a Denial of Service. NOTE: The vendor does not agree this is a vulneraility; In (very limited) circumstances a user may be able provoke the buffer overflow, the user is most likely already privileged to at least provoke denial of service by exhausting memory. Triggering this further requires the use of uncommon API (complicated structured dtypes), which is very unlikely to be available to an unprivileged user
- Record
EUVD-2021-0150- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6p56-wp2h-9hxr
6.0
NumPy Buffer Overflow (Disputed)
A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dimensions (over 32) from Python code, which could let a malicious user cause a Denial of Service.
NOTE: The vendor does not agree this is a vulnerability; In (very limited) circumstances a user may be able provoke the buffer overflow, the user is most likely already privileged to at least provoke denial of service by exhausting memory. Triggering this further requires the use of uncommon API (complicated structured dtypes), which is very unlikely to be available to an unprivileged user.
- Record
GHSA-6p56-wp2h-9hxr- CVSS 4.0
- 6.0 Medium
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
OSV
5.3
A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dimensions (over 32) from Python code, which could let a malicious user cause a Denial of Service. NOTE: The vendor does not agree this is a vulneraility; In (very limited) circumstances a user may be able provoke the buffer overflow, the user is most likely already privileged to at least provoke denial of service by exhausting memory. Triggering this further requires the use of uncommon API (complicated structured dtypes), which is very unlikely to be available to an unprivileged user
- Record
CVE-2021-33430- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2021-33430
5.3
A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dimensions (over 32) from Python code, which could let a malicious user cause a Denial of Service. NOTE: The vendor does not agree this is a vulneraility; In (very limited) circumstances a user may be able provoke the buffer overflow, the user is most likely already privileged to at least provoke denial of service by exhausting memory. Triggering this further requires the use of uncommon API (complicated structured dtypes), which is very unlikely to be available to an unprivileged user
- Record
DEBIAN-CVE-2021-33430- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 24 moreShow less
OSVGHSA-6p56-wp2h-9hxr
6.0
NumPy Buffer Overflow (Disputed)
A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dimensions (over 32) from Python code, which could let a malicious user cause a Denial of Service.
NOTE: The vendor does not agree this is a vulnerability; In (very limited) circumstances a user may be able provoke the buffer overflow, the user is most likely already privileged to at least provoke denial of service by exhausting memory. Triggering this further requires the use of uncommon API (complicated structured dtypes), which is very unlikely to be available to an unprivileged user.
- Record
GHSA-6p56-wp2h-9hxr- CVSS 4.0
- 6.0 Medium
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
OSVRHSA-2022:0987
7.5
Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (numpy) security update
- Record
RHSA-2022:0987- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2022:1000
7.5
Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (numpy) security update
- Record
RHSA-2022:1000- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-33430
5.3
A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dimensions (over 32) from Python code, which could let a malicious user cause a Denial of Service. NOTE: The vendor does not agree this is a vulneraility; In (very limited) circumstances a user may be able provoke the buffer overflow, the user is most likely already privileged to at least provoke denial of service by exhausting memory. Triggering this further requires the use of uncommon API (complicated structured dtypes), which is very unlikely to be available to an unprivileged user
- Record
UBUNTU-CVE-2021-33430- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVCLSA-2026-1789467688 No score
TuxCare security update for numpy (1 CVE)
TuxCare rebuilt numpy to address 1 CVE. Fixed in 1.16.0.post4+tuxcare.
- Record
CLSA-2026-1789467688- Updated
- 2026-11-02
OSVCLSA-2026-1789542174 No score
TuxCare security update for numpy (1 CVE)
TuxCare rebuilt numpy to address 1 CVE. Fixed in 1.15.4.post4+tuxcare.
- Record
CLSA-2026-1789542174- Updated
- 2026-11-02
OSVMGASA-2022-0032 No score
Updated python-numpy packages fix security vulnerability
Buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913). (CVE-2021-33430) Buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907). (CVE-2021-41496)
- Record
MGASA-2022-0032- Updated
- 2026-11-02
OSVopenSUSE-SU-2022:0134-1 No score
Security update for python-numpy
This update for python-numpy fixes the following issues:
- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- Record
openSUSE-SU-2022:0134-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2022:1064-1 No score
Security update for python2-numpy
This update for python2-numpy fixes the following issues:
- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort due to missing return value validation (bsc#1193911).
- Record
openSUSE-SU-2022:1064-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11747-1 No score
python310-numba-0.55.0-1.1 on GA media
These are all security issues fixed in the python310-numba-0.55.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11747-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13220-1 No score
python310-numpy-1.25.2-2.1 on GA media
These are all security issues fixed in the python310-numpy-1.25.2-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13220-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14311-1 No score
python310-numpy1-1.26.4-1.1 on GA media
These are all security issues fixed in the python310-numpy1-1.26.4-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14311-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:14743-1 No score
python311-numba-0.61.0-1.1 on GA media
These are all security issues fixed in the python311-numba-0.61.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:14743-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:11371-1 No score
python313-numpy-2.4.6-1.1 on GA media
These are all security issues fixed in the python313-numpy-2.4.6-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11371-1- Updated
- 2026-11-02
OSVPYSEC-2021-854 No score
A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dimensions (over 32) from Python code, which could let a malicious user cause a Denial of Service.
- Record
PYSEC-2021-854- Updated
- 2026-11-02
OSVSUSE-SU-2022:0118-1 No score
Security update for python-numpy
This update for python-numpy fixes the following issues:
- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- Record
SUSE-SU-2022:0118-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0134-1 No score
Security update for python-numpy
This update for python-numpy fixes the following issues:
- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- Record
SUSE-SU-2022:0134-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0134-2 No score
Security update for python-numpy
This update for python-numpy fixes the following issues:
- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- Record
SUSE-SU-2022:0134-2- Updated
- 2026-11-02
OSVSUSE-SU-2022:0134-3 No score
Security update for python-numpy
This update for python-numpy fixes the following issues:
- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- Record
SUSE-SU-2022:0134-3- Updated
- 2026-11-02
OSVSUSE-SU-2022:0206-1 No score
Security update for python-numpy
This update for python-numpy fixes the following issues:
- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- Record
SUSE-SU-2022:0206-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1064-1 No score
Security update for python2-numpy
This update for python2-numpy fixes the following issues:
- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort due to missing return value validation (bsc#1193911).
- Record
SUSE-SU-2022:1064-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1064-2 No score
Security update for python2-numpy
This update for python2-numpy fixes the following issues:
- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort due to missing return value validation (bsc#1193911).
- Record
SUSE-SU-2022:1064-2- Updated
- 2026-11-02
OSVSUSE-SU-2022:2441-1 No score
Security update for python2-numpy
This update for python2-numpy fixes the following issues:
- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort (bsc#1193911).
- Record
SUSE-SU-2022:2441-1- Updated
- 2026-11-02
OSVUSN-5763-1 No score
numpy vulnerabilities
It was discovered that NumPy did not properly manage memory when specifying arrays of large dimensions. If a user were tricked into running malicious Python file, an attacker could cause a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-33430)
It was discovered that NumPy did not properly perform string comparison operations under certain circumstances. An attacker could possibly use this issue to cause NumPy to crash, resulting in a denial of service. (CVE-2021-34141)
It was discovered that NumPy did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause NumPy to crash, resulting in a denial of service. (CVE-2021-41495, CVE-2021-41496)
- Record
USN-5763-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
numpyPyPI |
1.9.0 up to 1.21 | 1.21 |
numpyTuxCare:PyPI |
1.16.0 up to 1.16.0.post4+tuxcare, plus listed versions 1.16.0.post1+tuxcare1.16.0.post2+tuxcare1.16.0.post3+tuxcare |
1.16.0.post4+tuxcare |
numpyTuxCare:PyPI |
1.15.4 up to 1.15.4.post4+tuxcare, plus listed versions 1.15.4.post1+tuxcare1.15.4.post2+tuxcare1.15.4.post3+tuxcare |
1.15.4.post4+tuxcare |
numpyDebian:12 |
before 1:1.21.4-2 | 1:1.21.4-2 |
numpyDebian:13 |
before 1:1.21.4-2 | 1:1.21.4-2 |
numpyDebian:14 |
before 1:1.21.4-2 | 1:1.21.4-2 |
numpyPyPI |
1.9.0 up to 1.21, plus listed versions 1.10.01.10.11.10.21.10.31.10.4 Show 45 moreShow less1.11.01.11.11.11.21.11.31.12.01.12.11.13.01.13.11.13.31.14.01.14.11.14.21.14.31.14.41.14.51.14.61.15.01.15.11.15.21.15.31.15.41.16.01.16.11.16.21.16.31.16.41.16.51.16.61.17.01.17.11.17.21.17.31.17.41.17.51.18.01.18.11.18.21.18.31.18.41.18.51.19.01.19.11.19.21.19.31.19.4 |
1.21 |
python-numpyMageia:8 From an advisory covering 2 CVEs |
before 1.19.4-1.1.mga8 | 1.19.4-1.1.mga8 |
numpyPyPI |
1.9.0 up to 1.10.0, plus listed versions 1.9.11.9.21.9.3 |
1.10.0 |
numpyRed Hat:openstack:16.1::el8 From an advisory covering 2 CVEs |
before 1:1.17.0-8.el8ost | 1:1.17.0-8.el8ost |
Show 82 moreShow less
| Package | Affected | Fixed |
|---|---|---|
numpy-debugsourceRed Hat:openstack:16.1::el8 From an advisory covering 2 CVEs |
before 1:1.17.0-8.el8ost | 1:1.17.0-8.el8ost |
python3-numpyRed Hat:openstack:16.1::el8 From an advisory covering 2 CVEs |
before 1:1.17.0-8.el8ost | 1:1.17.0-8.el8ost |
python3-numpy-debuginfoRed Hat:openstack:16.1::el8 From an advisory covering 2 CVEs |
before 1:1.17.0-8.el8ost | 1:1.17.0-8.el8ost |
python3-numpy-f2pyRed Hat:openstack:16.1::el8 From an advisory covering 2 CVEs |
before 1:1.17.0-8.el8ost | 1:1.17.0-8.el8ost |
numpyRed Hat:openstack:16.2::el8 From an advisory covering 2 CVEs |
before 1:1.17.0-8.el8ost | 1:1.17.0-8.el8ost |
numpy-debugsourceRed Hat:openstack:16.2::el8 From an advisory covering 2 CVEs |
before 1:1.17.0-8.el8ost | 1:1.17.0-8.el8ost |
python3-numpyRed Hat:openstack:16.2::el8 From an advisory covering 2 CVEs |
before 1:1.17.0-8.el8ost | 1:1.17.0-8.el8ost |
python3-numpy-debuginfoRed Hat:openstack:16.2::el8 From an advisory covering 2 CVEs |
before 1:1.17.0-8.el8ost | 1:1.17.0-8.el8ost |
python3-numpy-f2pyRed Hat:openstack:16.2::el8 From an advisory covering 2 CVEs |
before 1:1.17.0-8.el8ost | 1:1.17.0-8.el8ost |
python-numpySUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 2 CVEs |
before 1.8.0-5.11.1 | 1.8.0-5.11.1 |
python-numpySUSE:Linux Enterprise Server 12 SP5 From an advisory covering 2 CVEs |
before 1.8.0-5.11.1 | 1.8.0-5.11.1 |
python-numpySUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 2 CVEs |
before 1.8.0-5.11.1 | 1.8.0-5.11.1 |
python-numpySUSE:Linux Enterprise Real Time 15 SP2 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpy_1_17_3-gnu-hpcSUSE:Linux Enterprise Real Time 15 SP2 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpy_1_17_3-gnu-hpcSUSE:Linux Enterprise Module for HPC 15 SP3 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpy_1_17_3-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpy_1_17_3-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpy_1_17_3-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpy_1_17_3-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpy_1_17_3-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpy_1_17_3-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise Server 15-LTSS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise Server 15 SP2-BCL From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Manager Proxy 4.1 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Manager Retail Branch Server 4.1 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Manager Server 4.1 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Enterprise Storage 6 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpySUSE:Enterprise Storage 7 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpy_1_13_3-gnu-hpcSUSE:Linux Enterprise Module for HPC 12 From an advisory covering 2 CVEs |
before 1.13.3-4.12.1 | 1.13.3-4.12.1 |
python-numpy_1_16_5-gnu-hpcSUSE:Linux Enterprise Module for HPC 15 SP3 From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python2-numpySUSE:Linux Enterprise Module for Python 2 15 SP3 From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python-numpy_1_16_5-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python2-numpySUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python-numpy_1_16_5-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python2-numpySUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python2-numpySUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python2-numpySUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python2-numpySUSE:Manager Proxy 4.1 From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python2-numpySUSE:Manager Retail Branch Server 4.1 From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python2-numpySUSE:Manager Server 4.1 From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python2-numpySUSE:Enterprise Storage 7 From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python-numpy_1_16_5-gnu-hpcopenSUSE:Leap 15.4 From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python-numpy_1_16_5-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python2-numpySUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python-numpy_1_16_5-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python2-numpySUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python-numpy_1_16_5-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python2-numpySUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python-numpy_1_16_5-gnu-hpcSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python2-numpySUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python2-numpySUSE:Linux Enterprise Server 15-LTSS From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python2-numpySUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python2-numpySUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python2-numpySUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python2-numpySUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
python2-numpySUSE:Enterprise Storage 6 From an advisory covering 3 CVEs |
before 1.16.5-150000.1.9.1 | 1.16.5-150000.1.9.1 |
numpyUbuntu:20.04:LTS |
before 1:1.17.4-5ubuntu3.1, plus listed versions 1:1.17.3-0ubuntu21:1.17.4-3ubuntu11:1.17.4-3ubuntu21:1.17.4-5ubuntu21:1.17.4-5ubuntu3 |
1:1.17.4-5ubuntu3.1 |
numpyUbuntu:20.04:LTS From an advisory covering 4 CVEs |
before 1:1.17.4-5ubuntu3.1, plus listed versions 1:1.17.3-0ubuntu21:1.17.4-3ubuntu11:1.17.4-3ubuntu21:1.17.4-5ubuntu21:1.17.4-5ubuntu3 |
1:1.17.4-5ubuntu3.1 |
numpyUbuntu:22.04:LTS From an advisory covering 4 CVEs |
before 1:1.21.5-1ubuntu22.04.1, plus listed versions 1:1.19.5-1ubuntu21:1.19.5-1ubuntu31:1.20.2-1ubuntu11:1.21.4-21:1.21.5-11:1.21.5-1build2 |
1:1.21.5-1ubuntu22.04.1 |
dxflibSUSE:Package Hub 15 SP3 From an advisory covering 2 CVEs |
before 3.17.0-bp153.2.3.1 | 3.17.0-bp153.2.3.1 |
dxflibopenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 3.17.0-bp153.2.3.1 | 3.17.0-bp153.2.3.1 |
python-numpyopenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpy_1_17_3-gnu-hpcopenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 1.17.3-10.1 | 1.17.3-10.1 |
python-numpy_1_16_5-gnu-hpcopenSUSE:Leap 15.3 From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python2-numpyopenSUSE:Leap 15.3 From an advisory covering 3 CVEs |
before 1.16.5-150200.3.5.1 | 1.16.5-150200.3.5.1 |
python-numpyopenSUSE:Tumbleweed From an advisory covering 3 CVEs |
before 1.25.2-2.1 | 1.25.2-2.1 |
python-numpy1openSUSE:Tumbleweed From an advisory covering 5 CVEs |
before 1.26.4-1.1 | 1.26.4-1.1 |
python-numbaopenSUSE:Tumbleweed |
before 0.61.0-1.1 | 0.61.0-1.1 |
python-numpyopenSUSE:Tumbleweed From an advisory covering 5 CVEs |
before 2.4.6-1.1 | 2.4.6-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-33430 is a medium vulnerability (CVSS 5.3) in Numpy, published December 17, 2021. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 1.53%, the 74th percentile. Fixed in numpy 1.21.
References
github.com/numpy/numpy/issues/18939
nvd.nist.gov/vuln/detail/CVE-2021-33430
github.com/numpy/numpy/commit/ae317fd9ff3e79c0eac357d723bfc29cbd625f2e
github.com/pypa/advisory-database/tree/main/vulns/numpy/PYSEC-2021-854.yaml
github.com/advisories/GHSA-6p56-wp2h-9hxr
security-tracker.debian.org/tracker/CVE-2021-33430
Show 41 moreShow less
github.com/numpy/numpy
advisories.mageia.org/MGASA-2022-0032.html
bugs.mageia.org/show_bug.cgi?id=29904
lists.opensuse.org/archives/list/[email protected]/thread/LQS3J3J4254A7C3LD55D7A432FZ2RFFI
access.redhat.com/errata/RHSA-2022:0987
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2035034
bugzilla.redhat.com/show_bug.cgi?id=2035040
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0987.json
access.redhat.com/security/cve/CVE-2021-33430
cve.org/CVERecord?id=CVE-2021-33430
access.redhat.com/security/cve/CVE-2021-41496
cve.org/CVERecord?id=CVE-2021-41496
nvd.nist.gov/vuln/detail/CVE-2021-41496
access.redhat.com/errata/RHSA-2022:1000
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1000.json
suse.com/support/update/announcement/2022/suse-su-20220118-1
bugzilla.suse.com/1193907
bugzilla.suse.com/1193913
suse.com/security/cve/CVE-2021-33430
suse.com/security/cve/CVE-2021-41496
suse.com/support/update/announcement/2022/suse-su-20220134-1
suse.com/support/update/announcement/2022/suse-su-20220134-2
suse.com/support/update/announcement/2022/suse-su-20220134-3
suse.com/support/update/announcement/2022/suse-su-20220206-1
suse.com/support/update/announcement/2022/suse-su-20221064-1
bugzilla.suse.com/1193911
suse.com/security/cve/CVE-2021-41495
suse.com/support/update/announcement/2022/suse-su-20221064-2
suse.com/support/update/announcement/2022/suse-su-20222441-1
ubuntu.com/security/CVE-2021-33430
github.com/numpy/numpy/pull/18989
github.com/numpy/numpy/commit/16f7824b4d935b6aee98298ca4123d57174a6f2e
ubuntu.com/security/notices/USN-5763-1
ubuntu.com/security/CVE-2021-34141
ubuntu.com/security/CVE-2021-41495
ubuntu.com/security/CVE-2021-41496
lists.opensuse.org/archives/list/[email protected]/thread/IVU5XH7TX2TXVVZCKS7DIEBNEJKYZTSK
suse.com/security/cve/CVE-2017-12852
suse.com/security/cve/CVE-2019-6446
lists.opensuse.org/archives/list/[email protected]/thread/PHMRQDMX53277YOHO7PEBZQRE6KORMWU
Left out here: 8 versions. The JSON record has them.