Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2010-1634
HistoryMay 27, 2010 - 7:30 p.m.

CVE-2010-1634

2010-05-2719:30:01
Debian Security Bug Tracker
security-tracker.debian.org
17

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

5.6 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.9%

Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent attackers to cause a denial of service (application crash) via a large fragment, as demonstrated by a call to audioop.lin2lin with a long string in the first argument, leading to a buffer overflow. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-3143.5.

OSVersionArchitecturePackageVersionFilename
Debian11allpython2.7< 2.7-1python2.7_2.7-1_all.deb

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

5.6 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.9%