| Package | Affected versions | Patched versions |
|---|---|---|
| python | ≥ 2.5.0, < 2.5.6≥ 2.6.0, < 2.6.6≥ 3.1.0, < 3.1.3 | 2.5.62.6.63.1.3 |
The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent attackers to cause a denial of service (memory corruption and application crash) via crafted arguments, as demonstrated by a call to audioop.reverse with a one-byte string, a different vulnerability than CVE-2010-1634.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free