CVE-2013-4251

HighCVSS 7.8/10Last modified Jun 16, 2026

Description

The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

Vendor	Product	Versions
SciPy	SciPy	before 0.12.1

References

http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120696.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119759.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119771.htmlMailing List, Third Party Advisory
http://www.securityfocus.com/bid/63008Third Party Advisory, VDB Entry
https://access.redhat.com/security/cve/cve-2013-4251Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4251Issue Tracking, Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-4251Issue Tracking, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/88052Third Party Advisory, VDB Entry
https://github.com/scipy/scipy/commit/bd296e0336420b840fcd2faabb97084fd252a973Patch, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2013-4251Patch, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120696.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119759.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119771.htmlMailing List, Third Party Advisory
http://www.securityfocus.com/bid/63008Third Party Advisory, VDB Entry
https://access.redhat.com/security/cve/cve-2013-4251Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4251Issue Tracking, Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-4251Issue Tracking, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/88052Third Party Advisory, VDB Entry
https://github.com/scipy/scipy/commit/bd296e0336420b840fcd2faabb97084fd252a973Patch, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2013-4251Patch, Third Party Advisory

Timeline

Published: Nov 4, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-42537.5The deployment script in the unsupported "OpenShift Extras" set of add-on scripts, in Red Hat Openshift 1, installs a default public key in CVE-2013-42546.9The validate_event function in arch/arm/kernel/perf_event.c in the Linux kernel before 3.10.8 on the ARM platform allows local users to gain CVE-2013-42553.5The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) C CVE-2013-42564.6Multiple stack-based and heap-based buffer overflows in Network Audio System (NAS) 1.9.3 allow local users to cause a denial of service (cra CVE-2013-42587.5Format string vulnerability in the osLogMsg function in server/os/aulog.c in Network Audio System (NAS) 1.9.3 allows remote attackers to cau CVE-2013-42591.9runner/connection_plugins/ssh.py in Ansible before 1.2.3, when using ControlPersist, allows local users to redirect a ssh session via a syml CVE-2013-42603.3lib/ansible/playbook/__init__.py in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error, allows local users to overwrite CVE-2013-42613.5OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occu CVE-2013-42622.4svnwcsub.py in Subversion 1.8.0 before 1.8.3, when using the --pidfile option and running in foreground mode, allows local users to gain pri CVE-2013-42637.5libavfilter in FFmpeg before 2.0.1 has unspecified impact and remote vectors related to a crafted "plane," which triggers an out-of-bounds h CVE-2013-42644.3The kempf_decode_tile function in libavcodec/g2meet.c in FFmpeg before 2.0.1 allows remote attackers to cause a denial of service (out-of-bo CVE-2013-426510.0The av_reallocp_array function in libavutil/mem.c in FFmpeg before 2.0.1 has an unspecified impact and remote vectors related to a "wrong re