Lucene search
+L

2 matches found

OSV
OSV
•added 2018/12/31 10:42 p.m.•22 views

MGASA-2018-0495 Updated python packages fix security vulnerabilities

Possible denial of service vulnerability due to a missing check in Lib/wave.py to verify that at least one channel is provided CVE-2017-18207. Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service...

9.8CVSS7.5AI score0.20126EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/01 12:00 a.m.•3 views

CVE-2017-18207: Divide By Zero

The Waveread.readfmtchunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service divide-by-zero and exception via a crafted wav format audio file. NOTE: the vendor disputes this issue because Python applications...

6.5CVSS6.4AI score0.01323EPSS
SaveExploits0References2
Rows per page
Query Builder