Test ID:	1.3.6.1.4.1.25623.1.1.2.2023.1720
Category:	Huawei EulerOS Local Security Checks
Title:	Huawei EulerOS: Security Advisory for numpy (EulerOS-SA-2023-1720)
Summary:	The remote host is missing an update for the Huawei EulerOS 'numpy' package(s) announced via the EulerOS-SA-2023-1720 advisory.
Description:	Summary: The remote host is missing an update for the Huawei EulerOS 'numpy' package(s) announced via the EulerOS-SA-2023-1720 advisory. Vulnerability Insight: ** DISPUTED ** Null Pointer Dereference vulnerability exists in numpy.sort in NumPy < and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error can only occur due to an exhaustion of memory. If the user can exhaust memory, they are already privileged. Further, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place.(CVE-2021-41495) Affected Software/OS: 'numpy' package(s) on Huawei EulerOS Virtualization for ARM 64 3.0.2.0. Solution: Please install the updated package(s). CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-41495 https://github.com/numpy/numpy/issues/19038
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.