The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service (divide-by-zero and exception) via a crafted wav format audio file. NOTE: the vendor disputes this issue because Python applications "need to be prepared to handle a wide variety of exceptions.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Huawei Euleros 2_0_sp2 | — | Upgrade python-libsUpgrade pythonUpgrade tkinterUpgrade python-devel | Jun 17, 2020 | Mar 1, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade pythonUpgrade python-develUpgrade tkinterUpgrade python-libs | Apr 16, 2020 | Mar 1, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-develUpgrade python2Upgrade python-unversioned-commandUpgrade python2-libsUpgrade python2-test | Mar 24, 2020 | Mar 1, 2018 |
| Suse | — | Upgrade python3-testsuiteUpgrade libsoftokn3Upgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-immodule-thaiUpgrade python36-baseUpgrade python-base-x86Upgrade firefox-gtk3-immodules-tigrignaUpgrade mozilla-nss-toolsUpgrade mozilla-nss-develUpgrade libfreebl3-32bitUpgrade firefox-gtk3-immodule-multipressUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-gtk3-immodule-inuktitutUpgrade libpython3_6m1_0-32bitUpgrade firefox-libharfbuzz0Upgrade firefox-glib2-langUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade python3-tkUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-32bitUpgrade python3-cursesUpgrade python-develUpgrade python-tkUpgrade firefox-gtk3-toolsUpgrade python-demoUpgrade mozilla-nss-certsUpgrade libfreebl3Upgrade python-cursesUpgrade python3-base-32bitUpgrade mozilla-nsprUpgrade MozillaFirefoxUpgrade python-doc-pdfUpgrade python-xmlUpgrade python3Upgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-certs-32bitUpgrade libpython2_6-1_0-32bitUpgrade pythonUpgrade firefox-gtk3-langUpgrade python3-toolsUpgrade python-32bitUpgrade firefox-libcairo-gobject2Upgrade python-idleUpgrade firefox-libffi4Upgrade python3-dbmUpgrade firefox-gtk3-dataUpgrade python3-32bitUpgrade firefox-libffi7Upgrade libpython2_6-1_0-x86Upgrade python3-develUpgrade firefox-glib2-toolsUpgrade python-docUpgrade firefox-gdk-pixbuf-langUpgrade firefox-gtk3-immodule-vietnameseUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-gtk3-immodule-amharicUpgrade firefox-libgtk-3-0Upgrade MozillaFirefox-translations-commonUpgrade python-baseUpgrade libfirefox-gio-2_0-0Upgrade python36Upgrade libpython3_4m1_0Upgrade libsoftokn3-32bitUpgrade libpython3_6m1_0Upgrade mozilla-nspr-develUpgrade libpython3_4m1_0-32bitUpgrade libpython2_6-1_0Upgrade python-base-32bitUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-libatk-1_0-0Upgrade python3-baseUpgrade python-gdbmUpgrade python-x86Upgrade firefox-gio-branding-upstreamUpgrade libpython2_7-1_0Upgrade firefox-atk-langUpgrade python3-idleUpgrade libfirefox-gobject-2_0-0Upgrade firefox-libcairo2Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gtk3-immodule-ximUpgrade libpython2_7-1_0-32bitUpgrade libfirefox-glib-2_0-0Upgrade mozilla-nssUpgrade libfirefox-gthread-2_0-0 | Apr 19, 2018 | Mar 1, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 1, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub