CVE-2010-2089
NoneCVSS
—
EPSS
14.6%
Published
May 27, 2010
CISA due date
—
The record
The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent attackers to cause a denial of service (memory corruption and application crash) via crafted arguments, as demonstrated by a call to audioop.reverse with a one-byte string, a different vulnerability than CVE-2010-1634.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | python2.7 | 0 | 2.7-1 |
| Debian:11 | python2.7 | 0 | 2.7-1 |
| Red Hat:enterprise_linux:4::as | python | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:4::as | python-debuginfo | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:4::as | python-devel | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:4::as | python-docs | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:4::as | python-tools | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:4::as | tkinter | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:4::desktop | python | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:4::desktop | python-debuginfo | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:4::desktop | python-devel | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:4::desktop | python-docs | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:4::desktop | python-tools | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:4::desktop | tkinter | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:4::es | python | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:4::es | python-debuginfo | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:4::es | python-devel | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:4::es | python-docs | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:4::es | python-tools | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:4::es | tkinter | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:4::ws | python | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:4::ws | python-debuginfo | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:4::ws | python-devel | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:4::ws | python-docs | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:4::ws | python-tools | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:4::ws | tkinter | 0 | 0:2.3.4-14.10.el4 |
| Red Hat:enterprise_linux:5::client | python | 0 | 0:2.4.3-43.el5 |
| Red Hat:enterprise_linux:5::client | python-debuginfo | 0 | 0:2.4.3-43.el5 |
| Red Hat:enterprise_linux:5::client | python-devel | 0 | 0:2.4.3-43.el5 |
| Red Hat:enterprise_linux:5::client | python-libs | 0 | 0:2.4.3-43.el5 |
| Red Hat:enterprise_linux:5::client | python-tools | 0 | 0:2.4.3-43.el5 |
| Red Hat:enterprise_linux:5::client | tkinter | 0 | 0:2.4.3-43.el5 |
| Red Hat:enterprise_linux:5::client_workstation | python | 0 | 0:2.4.3-43.el5 |
| Red Hat:enterprise_linux:5::client_workstation | python-debuginfo | 0 | 0:2.4.3-43.el5 |
| Red Hat:enterprise_linux:5::client_workstation | python-devel | 0 | 0:2.4.3-43.el5 |
| Red Hat:enterprise_linux:5::client_workstation | python-libs | 0 | 0:2.4.3-43.el5 |
| Red Hat:enterprise_linux:5::client_workstation | python-tools | 0 | 0:2.4.3-43.el5 |
| Red Hat:enterprise_linux:5::client_workstation | tkinter | 0 | 0:2.4.3-43.el5 |
| Red Hat:enterprise_linux:5::server | python | 0 | 0:2.4.3-43.el5 |
| Red Hat:enterprise_linux:5::server | python-debuginfo | 0 | 0:2.4.3-43.el5 |
| Red Hat:enterprise_linux:5::server | python-devel | 0 | 0:2.4.3-43.el5 |
| Red Hat:enterprise_linux:5::server | python-libs | 0 | 0:2.4.3-43.el5 |
| Red Hat:enterprise_linux:5::server | python-tools | 0 | 0:2.4.3-43.el5 |
| Red Hat:enterprise_linux:5::server | tkinter | 0 | 0:2.4.3-43.el5 |
Related vulnerabilities
- CVE-2024-0450 An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7… Also affects python2.7
- CVE-2014-1912 Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python… Also affects python2.7
- CVE-2024-9287 A vulnerability has been found in the CPython `venv` module and CLI where path names… Also affects python2.7
- CVE-2024-6232 There is a MEDIUM severity vulnerability affecting CPython. Also affects python2.7
- CVE-2024-8088 There is a HIGH severity vulnerability affecting the CPython "zipfile" module affecting… Also affects python2.7
- CVE-2024-6923 There is a MEDIUM severity vulnerability affecting CPython. Also affects python2.7
- CVE-2024-5642 CPython 3.9 and earlier doesn't disallow configuring an empty list ("[]") for… Also affects python2.7
- CVE-2024-0397 A defect was discovered in the Python “ssl” module where there is a memory race condition… Also affects python2.7