A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. Note: This is disputed as a bug and not a vulnerability. SciPy is not designed to be exposed to untrusted users or data directly.

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - scipy: use-after-free in Py_FindObjects() function (CVE-2023-29824)

  - A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in     Py_FindObjects() function. Note: This is disputed as a bug and not a vulnerability. SciPy is not designed     to be exposed to untrusted users or data directly. (CVE-2023-25399)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - scipy: use-after-free in Py_FindObjects() function (CVE-2023-29824)

  - A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in     Py_FindObjects() function. Note: This is disputed as a bug and not a vulnerability. SciPy is not designed     to be exposed to untrusted users or data directly. (CVE-2023-25399)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the versions of the scipy package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in     Py_FindObjects() function. (CVE-2023-25399)

  - A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE:
    the vendor and discoverer indicate that this is not a security issue. (CVE-2023-29824)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the scipy package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in     Py_FindObjects() function. (CVE-2023-25399)

  - A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE:
    the vendor and discoverer indicate that this is not a security issue. (CVE-2023-29824)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3272-1 advisory.

  - A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in     Py_FindObjects() function. (CVE-2023-25399)

  - ** DISPUTED ** A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior     to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue. (CVE-2023-29824)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2970-1 advisory.

  - A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in     Py_FindObjects() function. (CVE-2023-25399)

  - ** DISPUTED ** A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior     to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue. (CVE-2023-29824)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 ESM / 22.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6226-1 advisory.

    It was discovered that SciPy did not properly manage memory operations during reference counting. An     attacker could possibly use this issue to cause a denial of service. (CVE-2023-25399)

    A use-after-free was discovered in SciPy when handling reference counts. An attacker could possibly use     this to cause a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2023-29824)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
198474	RHEL 9 : scipy (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
198472	RHEL 8 : scipy (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
189056	EulerOS Virtualization 2.11.0 : scipy (EulerOS-SA-2023-3080)	Nessus	Huawei Local Security Checks	critical
189018	EulerOS 2.0 SP11 : scipy (EulerOS-SA-2023-2853)	Nessus	Huawei Local Security Checks	critical
188991	EulerOS Virtualization 2.9.0 : scipy (EulerOS-SA-2023-3108)	Nessus	Huawei Local Security Checks	critical
188981	EulerOS Virtualization 2.10.0 : scipy (EulerOS-SA-2023-3483)	Nessus	Huawei Local Security Checks	critical
188887	EulerOS Virtualization 2.11.1 : scipy (EulerOS-SA-2023-3063)	Nessus	Huawei Local Security Checks	critical
188884	EulerOS Virtualization 3.0.6.0 : scipy (EulerOS-SA-2023-3454)	Nessus	Huawei Local Security Checks	critical
188858	EulerOS Virtualization 3.0.6.6 : scipy (EulerOS-SA-2023-3414)	Nessus	Huawei Local Security Checks	critical
188845	EulerOS 2.0 SP10 : scipy (EulerOS-SA-2023-3195)	Nessus	Huawei Local Security Checks	critical
188786	EulerOS 2.0 SP9 : scipy (EulerOS-SA-2023-2908)	Nessus	Huawei Local Security Checks	critical
188773	EulerOS Virtualization 2.10.1 : scipy (EulerOS-SA-2023-3511)	Nessus	Huawei Local Security Checks	critical
188761	EulerOS Virtualization 2.9.1 : scipy (EulerOS-SA-2023-3094)	Nessus	Huawei Local Security Checks	critical
188752	EulerOS 2.0 SP8 : scipy (EulerOS-SA-2023-3158)	Nessus	Huawei Local Security Checks	critical
188751	EulerOS 2.0 SP11 : scipy (EulerOS-SA-2023-2870)	Nessus	Huawei Local Security Checks	critical
188719	EulerOS 2.0 SP9 : scipy (EulerOS-SA-2023-2889)	Nessus	Huawei Local Security Checks	critical
188694	EulerOS 2.0 SP10 : scipy (EulerOS-SA-2023-3230)	Nessus	Huawei Local Security Checks	critical
179719	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-scipy (SUSE-SU-2023:3272-1)	Nessus	SuSE Local Security Checks	critical
178806	openSUSE 15 Security Update : python-scipy (SUSE-SU-2023:2970-1)	Nessus	SuSE Local Security Checks	critical
178223	Ubuntu 20.04 ESM / 22.04 ESM : SciPy vulnerabilities (USN-6226-1)	Nessus	Ubuntu Local Security Checks	critical

Detections

Analytics

CVE-2023-25399

medium

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical