CVE-2010-2089

Python: Memory corruption in audioop module

Published May 27, 2010 CVSS 2.0 · 5.0 Medium EPSS 14.6% KEV · Not listed
Description
The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent attackers to cause a denial of service (memory corruption and application crash) via crafted arguments, as demonstrated by a call to audioop.reverse with a one-byte string, a different vulnerability than CVE-2010-1634.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Ubuntu USN Ubuntu USN USN-1596-1 Python 2.6 vulnerabilities
Ubuntu USN Ubuntu USN USN-1613-1 Python 2.5 vulnerabilities
Ubuntu USN Ubuntu USN USN-1613-2 Python 2.4 vulnerabilities
Ubuntu USN Ubuntu USN USN-1616-1 Python 3.1 vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 2:17 AM
Reserved
May 27, 2010, 12:00 AM
Status
Modified
Published
May 27, 2010, 7:30 PM
Modified
Jun 16, 2026, 11:19 PM
Severity
Low
Public date
Jan 11, 2010, 12:00 AM