The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent attackers to cause a denial of service (memory corruption and application crash) via crafted arguments, as demonstrated by a call to audioop.reverse with a one-byte string, a different vulnerability than CVE-2010-1634.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
Ubuntu USN |
USN-1596-1 | Python 2.6 vulnerabilities |
Ubuntu USN |
USN-1613-1 | Python 2.5 vulnerabilities |
Ubuntu USN |
USN-1613-2 | Python 2.4 vulnerabilities |
Ubuntu USN |
USN-1616-1 | Python 3.1 vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T02:17:14.558Z
Reserved: 2010-05-27T00:00:00
Link: CVE-2010-2089
No data.
Status : Deferred
Published: 2010-05-27T19:30:01.827
Modified: 2025-04-11T00:51:21.963
Link: CVE-2010-2089
OpenCVE Enrichment
No data.
Ubuntu USN