Most recent entries from all

bdu:2024-07432

BREW-scipy-CVE-2023-29824

Affected: Homebrew: scipy

A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.

EUVD-2026-8455

fkie_cve-2023-29824

A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.

Withdrawn: GHSA-jrfm-2h82-xg28 — Withdrawn: Use after free in SciPy

Withdrawn by the publisher.

Affected: PyPI: scipy

## Withdrawn Advisory

This advisory has been withdrawn because it has been found to not be an issue. Please see the issue [here](https://github.com/scipy/scipy/issues/14713#issuecomment-1629468565) for more information.

## Original Description

A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0.

gsd-2023-29824

PYSEC-2023-114

Affected: PyPI: scipy

** DISPUTED ** A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.

RHSA-2023:5009 — Red Hat Security Advisory: OpenShift Container Platform 4.14.0 security update

golang: net/http: handle server errors after sending GOAWAY kube-apiserver: Bypassing policies imposed by the ImagePolicyWebhook admission plugin kube-apiserver: Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin openshift: OCP & FIPS mode ovn: service monitor MAC flow is not rate limited golang.org/x/net/html: Cross site scripting golang: crypto/tls: slow verification of certificate chains containing large RSA keys scipy: use-after-free in Py_FindObjects() function goproxy: Denial of service (DoS) via unspecified vectors. golang: html/template: improper handling of HTML-like comments within script contexts golang: html/template: improper handling of special tags within script contexts golang: crypto/tls: panic when processing post-handshake message on QUIC connections golang: crypto/tls: lack of a limit on buffered post-handshake golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

SUSE-SU-2023:2970-1 — Security update for python-scipy

Security update for python-scipy

Withdrawn: UBUNTU-CVE-2023-29824

Withdrawn by the publisher.

Affected: Ubuntu:Pro:20.04:LTS: scipy

A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.

WID-SEC-W-2024-0423 — IBM Business Automation Workflow: Mehrere Schwachstellen

Ein entfernter Angreifer kann mehrere Schwachstellen in IBM Business Automation Workflow ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder Informationen offenzulegen.