Lucene search
RootSSV:19709HistoryMay 31, 2010 - 12:00 a.m.
Python audioop模块远程拒绝服务漏洞
2010-05-3100:00:00
Root
www.seebug.org
21
0.023 Low
EPSS
Percentile
88.6%
CVE ID: CVE-2010-2089
Python是一种开放源代码的脚本编程语言。
Python的audioop模块中的多数函数直接将字节字符串（音频数据）和size参数（采样的字节数）用作了输入，但没有检查字节字符串的长度为 size的整数倍。如果用户从音频文件读取了特制参数，就可能对未经初始化的内存执行读写访问，应用程序可能会崩溃。
Python Software Foundation Python 3.2
Python Software Foundation Python 2.7
厂商补丁：
Python Software Foundation
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
$ python -c "import audioop; audioop.reverse('X', 2)"
Related
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:53:09
openvas
openvas
Mandriva Update for plymouth MDVA-2010:132 (plymouth)
2010-04-30 00:00:00
Mandriva Update for plymouth MDVA-2010:132 (plymouth)
2010-04-30 00:00:00
Fedora Update for python FEDORA-2010-9565
2010-07-06 00:00:00
cve
cve
CVE-2010-2089
2010-05-27 19:30:00
ubuntucve
ubuntucve
CVE-2010-2089
2010-05-27 00:00:00
debiancve
debiancve
CVE-2010-2089
2010-05-27 19:30:00
securityvulns
securityvulns
python security vulnerabilities
2010-07-17 00:00:00
[ MDVSA-2010:132 ] python
2010-07-17 00:00:00
APPLE-SA-2011-10-12-3 OS X Lion v10.7.2 and Security Update 2011-006
2011-10-16 00:00:00
prion
prion
Memory corruption
2010-05-27 19:30:00
nessus
nessus
Fedora 13 : python-2.6.4-27.fc13 (2010-9652)
2010-07-01 00:00:00
Fedora 12 : python-2.6.2-8.fc12 (2010-9565)
2010-07-06 00:00:00
openSUSE Security Update : libpython2_6-1_0 (openSUSE-SU-2010:1049-1)
2011-05-05 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: python-2.6.2-8.fc12
2010-07-05 22:05:10
[SECURITY] Fedora 13 Update: python-2.6.4-27.fc13
2010-06-14 17:09:57
[SECURITY] Fedora 13 Update: python3-3.1.2-7.fc13
2010-09-04 04:58:36
oraclelinux
oraclelinux
python security update
2011-05-05 00:00:00
python security, bug fix, and enhancement update
2011-05-28 00:00:00
python security, bug fix, and enhancement update
2011-01-20 00:00:00
redhat
redhat
(RHSA-2011:0491) Moderate: python security update
2011-05-05 00:00:00
(RHSA-2011:0027) Low: python security, bug fix, and enhancement update
2011-01-13 00:00:00
centos
centos
python, tkinter security update
2011-05-05 21:37:02
ubuntu
ubuntu
Python 3.1 vulnerabilities
2012-10-24 00:00:00
Python 2.6 vulnerabilities
2012-10-04 00:00:00
Python 2.4 vulnerabilities
2012-10-17 00:00:00
gentoo
gentoo
Python: Multiple vulnerabilities
2014-01-06 00:00:00
vmware
vmware
VMware ESXi and ESX updates to third party library and ESX Service Console
2012-01-30 00:00:00
VMware ESXi and ESX updates to third party library and ESX Service Console
2012-01-30 00:00:00