CVE-2010-1634

Python 2.6, 2.7, 3.1, 3.2 - Denial of Service via Integer Overflow in audioop.lin2lin

Title source: llm

Description

Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent attackers to cause a denial of service (application crash) via a large fragment, as demonstrated by a call to audioop.lin2lin with a long string in the first argument, leading to a buffer overflow. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-3143.5.

References (26)

Core 26

Core References

Issue Tracking, Patch, Vendor Advisory x_refsource_confirm

http://bugs.python.org/issue8674

Not Applicable third-party-advisory x_refsource_secunia

http://secunia.com/advisories/43068

Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora

http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042751.html

Not Applicable third-party-advisory x_refsource_secunia

http://secunia.com/advisories/51087

Permissions Required, Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2011/0212

Third Party Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-1616-1

Not Applicable third-party-advisory x_refsource_secunia

http://secunia.com/advisories/51040

Permissions Required, Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2010/1448

Not Applicable third-party-advisory x_refsource_secunia

http://secunia.com/advisories/50858

Broken Link, Issue Tracking, Third Party Advisory vendor-advisory x_refsource_apple

http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html

Permissions Required, Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2011/0122

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Issue Tracking, Patch, Third Party Advisory x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=590690

Not Applicable third-party-advisory x_refsource_secunia

http://secunia.com/advisories/42888

Patch, Permissions Required, Vendor Advisory x_refsource_confirm

http://svn.python.org/view?rev=81045&view=rev

Not Applicable third-party-advisory x_refsource_secunia

http://secunia.com/advisories/39937

Third Party Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-1596-1

Not Applicable third-party-advisory x_refsource_secunia

http://secunia.com/advisories/40194

Third Party Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2011-0027.html

Third Party Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-1613-2

Third Party Advisory x_refsource_confirm

http://support.apple.com/kb/HT5002

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/40370

Not Applicable third-party-advisory x_refsource_secunia

http://secunia.com/advisories/51024

Third Party Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-1613-1

Patch, Permissions Required, Vendor Advisory x_refsource_confirm

http://svn.python.org/view?rev=81079&view=rev

Scores

EPSS 0.0121

EPSS Percentile 79.3%

Details

CWE

CWE-190

Status published

Products (10)

canonical/ubuntu_linux 8.04

canonical/ubuntu_linux 10.04

canonical/ubuntu_linux 11.04

canonical/ubuntu_linux 11.10

fedoraproject/fedora 13

opensuse/opensuse 11.2

opensuse/opensuse 11.3

python/python 2.5.0 - 2.5.6

suse/linux_enterprise_server 10 sp3

suse/linux_enterprise_server 11 (2 CPE variants)

Published May 27, 2010

Tracked Since Feb 18, 2026