Vulnerabilities (CVE)

Filtered by vendor Cvxopt Project Subscribe
Filtered by product Cvxopt
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-41500 2 Cvxopt Project, Fedoraproject 2 Cvxopt, Fedora 2023-12-10 5.0 MEDIUM 7.5 HIGH
Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in APIs (cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve), which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects.