1. CVE-Search
  2. CVE-2010-2089
ID CVE-2010-2089
Summary The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent attackers to cause a denial of service (memory corruption and application crash) via crafted arguments, as demonstrated by a call to audioop.reverse with a one-byte string, a different vulnerability than CVE-2010-1634.
References
Vulnerable Configurations
  • cpe:2.3:a:python:python:3.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:python:python:3.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:python:python:3.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:python:python:3.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:python:python:3.1.1:-:*:*:*:*:*:*
    cpe:2.3:a:python:python:3.1.1:-:*:*:*:*:*:*
  • cpe:2.3:a:python:python:3.1.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:python:python:3.1.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:python:python:3.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:python:python:3.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:python:python:3.1.2:-:*:*:*:*:*:*
    cpe:2.3:a:python:python:3.1.2:-:*:*:*:*:*:*
  • cpe:2.3:a:python:python:3.1.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:python:python:3.1.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:python:python:2.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:python:python:2.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:python:python:2.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:python:python:2.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:python:python:2.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:python:python:2.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:python:python:2.6.3:*:*:*:*:*:*:*
    cpe:2.3:a:python:python:2.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:python:python:2.6.4:*:*:*:*:*:*:*
    cpe:2.3:a:python:python:2.6.4:*:*:*:*:*:*:*
  • cpe:2.3:a:python:python:2.6.5:*:*:*:*:*:*:*
    cpe:2.3:a:python:python:2.6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:python:python:2.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:python:python:2.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:python:python:2.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:python:python:2.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:python:python:2.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:python:python:2.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:python:python:2.5.3:*:*:*:*:*:*:*
    cpe:2.3:a:python:python:2.5.3:*:*:*:*:*:*:*
  • cpe:2.3:a:python:python:2.5.4:*:*:*:*:*:*:*
    cpe:2.3:a:python:python:2.5.4:*:*:*:*:*:*:*
  • cpe:2.3:a:python:python:2.5.5:*:*:*:*:*:*:*
    cpe:2.3:a:python:python:2.5.5:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 16-08-2022 - 13:32)
Impact:
Exploitability:
CWE CWE-787
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
redhat via4
advisories
bugzilla
id 644761
title python-libs conflict on ia64 compatlayer
oval
OR
  • comment Red Hat Enterprise Linux must be installed
    oval oval:com.redhat.rhba:tst:20070304026
  • AND
    • comment Red Hat Enterprise Linux 5 is installed
      oval oval:com.redhat.rhba:tst:20070331005
    • OR
      • AND
        • comment python is earlier than 0:2.4.3-43.el5
          oval oval:com.redhat.rhsa:tst:20110027001
        • comment python is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20091176002
      • AND
        • comment python-devel is earlier than 0:2.4.3-43.el5
          oval oval:com.redhat.rhsa:tst:20110027003
        • comment python-devel is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20091176004
      • AND
        • comment python-libs is earlier than 0:2.4.3-43.el5
          oval oval:com.redhat.rhsa:tst:20110027005
        • comment python-libs is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20110027006
      • AND
        • comment python-tools is earlier than 0:2.4.3-43.el5
          oval oval:com.redhat.rhsa:tst:20110027007
        • comment python-tools is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20091176006
      • AND
        • comment tkinter is earlier than 0:2.4.3-43.el5
          oval oval:com.redhat.rhsa:tst:20110027009
        • comment tkinter is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20091176008
rhsa
id RHSA-2011:0027
released 2011-01-13
severity Low
title RHSA-2011:0027: python security, bug fix, and enhancement update (Low)
rpms
  • python-0:2.4.3-43.el5
  • python-debuginfo-0:2.4.3-43.el5
  • python-devel-0:2.4.3-43.el5
  • python-libs-0:2.4.3-43.el5
  • python-tools-0:2.4.3-43.el5
  • tkinter-0:2.4.3-43.el5
  • python-0:2.3.4-14.10.el4
  • python-debuginfo-0:2.3.4-14.10.el4
  • python-devel-0:2.3.4-14.10.el4
  • python-docs-0:2.3.4-14.10.el4
  • python-tools-0:2.3.4-14.10.el4
  • tkinter-0:2.3.4-14.10.el4
refmap via4
apple APPLE-SA-2011-10-12-3
bid 40863
confirm
fedora FEDORA-2010-9652
secunia
  • 40194
  • 42888
  • 43068
  • 50858
  • 51024
  • 51040
  • 51087
suse
  • SUSE-SR:2010:024
  • SUSE-SR:2011:002
ubuntu
  • USN-1596-1
  • USN-1613-1
  • USN-1613-2
  • USN-1616-1
vupen
  • ADV-2010-1448
  • ADV-2011-0122
  • ADV-2011-0212
Last major update 16-08-2022 - 13:32
Published 27-05-2010 - 19:30
Last modified 16-08-2022 - 13:32
Back to Top