5

CVE-2010-1634

Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent attackers to cause a denial of service (application crash) via a large fragment, as demonstrated by a call to audioop.lin2lin with a long string in the first argument, leading to a buffer overflow.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-3143.5.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Python ≫ Python Version >= 2.5.0 < 2.5.6
Python ≫ Python Version >= 2.6.0 < 2.6.6
Python ≫ Python Version >= 3.1.0 < 3.1.3
Fedoraproject ≫ Fedora Version 13
Opensuse ≫ Opensuse Version 11.2
Opensuse ≫ Opensuse Version 11.3
Suse ≫ Linux Enterprise Server Version 10 Update sp3 SwEdition -
Suse ≫ Linux Enterprise Server Version 11 Update -
Suse ≫ Linux Enterprise Server Version 11 Update sp1
Canonical ≫ Ubuntu Linux Version 8.04 SwEdition -
Canonical ≫ Ubuntu Linux Version 10.04 SwEdition -
Canonical ≫ Ubuntu Linux Version 11.04
Canonical ≫ Ubuntu Linux Version 11.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.38% 0.9
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
Third Party Advisory
Mailing List
http://secunia.com/advisories/43068
Not Applicable
http://www.vupen.com/english/advisories/2011/0212
Third Party Advisory
Permissions Required
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042751.html
Third Party Advisory
Mailing List
http://secunia.com/advisories/40194
Not Applicable
http://secunia.com/advisories/42888
Not Applicable
http://secunia.com/advisories/50858
Not Applicable
http://secunia.com/advisories/51024
Not Applicable
http://secunia.com/advisories/51040
Not Applicable
http://secunia.com/advisories/51087
Not Applicable
http://www.redhat.com/support/errata/RHSA-2011-0027.html
Third Party Advisory
http://www.ubuntu.com/usn/USN-1596-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-1613-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-1613-2
Third Party Advisory
http://www.ubuntu.com/usn/USN-1616-1
Third Party Advisory
http://www.vupen.com/english/advisories/2010/1448
Third Party Advisory
Permissions Required
http://www.vupen.com/english/advisories/2011/0122
Third Party Advisory
Permissions Required
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
Third Party Advisory
Mailing List
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
Third Party Advisory
Broken Link
Issue Tracking
http://support.apple.com/kb/HT5002
Third Party Advisory
http://bugs.python.org/issue8674
Patch
Vendor Advisory
Issue Tracking
http://secunia.com/advisories/39937
Not Applicable
http://svn.python.org/view?rev=81045&view=rev
Patch
Vendor Advisory
Permissions Required
http://svn.python.org/view?rev=81079&view=rev
Patch
Vendor Advisory
Permissions Required
http://www.securityfocus.com/bid/40370
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=590690
Patch
Third Party Advisory
Issue Tracking