CVE-2010-2089: Medium severity Python Python vulnerability
Common Vulnerabilities and Exposures assigned an identifier CVE-2010-2089 to the following vulnerability:
The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent attackers to cause a denial of service (memory corruption and application crash) via crafted arguments, as demonstrated by a call to audioop.reverse with a one-byte string, a different vulnerability than CVE-2010-1634.
References: [1] http://bugs.python.org/issue7673
Public PoC (from [1]): $ python -c "import audioop; audioop.reverse('X', 2)" Fatal Python error: Inconsistent interned string state. Abandon
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2010-2089?
CVE-2010-2089 is a vulnerability in the audioop module in Python 2.7 and 3.2 that allows context-dependent attackers to cause a denial of service (memory corruption and application crash) via crafted arguments.
How does CVE-2010-2089 impact Python?
CVE-2010-2089 can cause a denial of service (memory corruption and application crash) in Python 2.7 and 3.2.
What is the severity of CVE-2010-2089?
CVE-2010-2089 has a severity value of 5, which is considered medium severity.
Which versions of Python are affected by CVE-2010-2089?
CVE-2010-2089 affects Python versions 2.5.0 to 2.6.6, 3.1.0 to 3.1.3, 2.7, and 3.2.
Are there any fixes available for CVE-2010-2089?
Yes, fixes for CVE-2010-2089 are available for the affected versions of Python.