CVE-2010-2089 The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent attackers to cause a denial of service (memory...
MediumCVSS 5.0
EPSS 14.6%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent attackers to cause a denial of service (memory corruption and application crash) via crafted arguments, as demonstrated by a call to audioop.reverse with a one-byte string, a different vulnerability than CVE-2010-1634.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| python | >= 2.5.0, < 2.5.6 | 2.5.6 |
| python | >= 2.6.0, < 2.6.6 | 2.6.6 |
| python | >= 3.1.0, < 3.1.3 | 3.1.3 |
| debian/python2.7(Debian:11) | < 2.7-1 | 2.7-1 |
References
- bugs.python.org patch vendor-advisory
- APPLE-SA-2011-10-12-3 mailing-list third-party-advisory vendor-advisory
- FEDORA-2010-9652 mailing-list third-party-advisory vendor-advisory
- SUSE-SR:2010:024 mailing-list third-party-advisory vendor-advisory
- SUSE-SR:2011:002 mailing-list third-party-advisory vendor-advisory
- 40194 third-party-advisory
- 42888 third-party-advisory
- 43068 third-party-advisory
- 50858 third-party-advisory
- 51024 third-party-advisory
- 51040 third-party-advisory
- 51087 third-party-advisory
- support.apple.com third-party-advisory
- RHSA-2011:0027 third-party-advisory vendor-advisory
- 40863 third-party-advisory vdb-entry
- USN-1596-1 third-party-advisory vendor-advisory
- USN-1613-1 third-party-advisory vendor-advisory
- USN-1613-2 third-party-advisory vendor-advisory
- USN-1616-1 third-party-advisory vendor-advisory
- ADV-2010-1448 third-party-advisory vdb-entry
- ADV-2011-0122 third-party-advisory vdb-entry
- ADV-2011-0212 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking third-party-advisory
- security-tracker.debian.org vendor-advisory