Description
Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent attackers to cause a denial of service (application crash) via a large fragment, as demonstrated by a call to audioop.lin2lin with a long string in the first argument, leading to a buffer overflow. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-3143.5.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 11 | python2.7 | 2.7-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | python +4 | 2.4.3-43.el5 | RHSA-2011:0027 |
| RHEL 4 | python +4 | 2.3.4-14.10.el4 | RHSA-2011:0491 |
Advisories 2
- RHSA-2011:0491 Red Hat Security Advisory: python security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2011:0027 Red Hat Security Advisory: python security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 28, 2026
References
- http://bugs.python.org/issue8674
- 43068 third-party-advisory
- FEDORA-2010-9652 vendor-advisory
- 51087 third-party-advisory
- ADV-2011-0212 vdb-entry
- USN-1616-1 vendor-advisory
- 51040 third-party-advisory
- ADV-2010-1448 vdb-entry
- 50858 third-party-advisory
- APPLE-SA-2011-10-12-3 vendor-advisory
- ADV-2011-0122 vdb-entry
- SUSE-SR:2011:002 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=590690
- 42888 third-party-advisory
- http://svn.python.org/view?rev=81045&view=rev
- 39937 third-party-advisory
- USN-1596-1 vendor-advisory
- 40194 third-party-advisory
- RHSA-2011:0027 vendor-advisory
- USN-1613-2 vendor-advisory
- http://support.apple.com/kb/HT5002
- SUSE-SR:2010:024 vendor-advisory
- 40370 vdb-entry
- 51024 third-party-advisory
- USN-1613-1 vendor-advisory
- http://svn.python.org/view?rev=81079&view=rev