Input validation error in Python - CVE-2010-1634

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU110152

Input validation error in Python - CVE-2010-1634

Published: February 13, 2023 / Updated: June 3, 2025


Vulnerability identifier: #VU110152
CSH Severity: Medium
CVSSv4.0:
CVE-ID: CVE-2010-1634
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
Python
Software vendor:
Python.org

Description

The vulnerability allows context-dependent attackers to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can cause a denial of service (application crash) via a large fragment, as demonstrated by a call to audioop.lin2lin with a long string in the first argument, leading to a buffer overflow.


Remediation

Install update from vendor's website.

External links