The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service (divide-by-zero and exception) via a crafted wav format audio file. NOTE: the vendor disputes this issue because Python applications "need to be prepared to handle a wide variety of exceptions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Huawei Euleros 2_0_sp2 | — | Upgrade tkinterUpgrade python-develUpgrade python-libsUpgrade python | Jun 17, 2020 | Mar 1, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade tkinterUpgrade python-develUpgrade python-libsUpgrade python | Apr 16, 2020 | Mar 1, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-develUpgrade python2-libsUpgrade python2Upgrade python-unversioned-commandUpgrade python2-test | Mar 24, 2020 | Mar 1, 2018 |
| Suse | — | Upgrade python3-idleUpgrade firefox-gio-branding-upstreamUpgrade firefox-gtk3-immodule-ximUpgrade libfirefox-glib-2_0-0Upgrade libpython2_6-1_0-x86Upgrade firefox-gdk-pixbuf-langUpgrade firefox-libcairo-gobject2Upgrade python3-develUpgrade firefox-glib2-toolsUpgrade firefox-libgtk-3-0Upgrade python-idleUpgrade mozilla-nspr-develUpgrade python-base-32bitUpgrade python-docUpgrade python3-toolsUpgrade pythonUpgrade libpython2_6-1_0Upgrade python-32bitUpgrade libpython2_7-1_0Upgrade firefox-gtk3-langUpgrade libpython3_4m1_0-32bitUpgrade python3-baseUpgrade python36Upgrade python3-dbmUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade python-baseUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-libffi4Upgrade libsoftokn3-32bitUpgrade libfirefox-gobject-2_0-0Upgrade python-gdbmUpgrade firefox-atk-langUpgrade libpython3_4m1_0Upgrade libfirefox-gmodule-2_0-0Upgrade python-x86Upgrade firefox-libatk-1_0-0Upgrade libfirefox-gio-2_0-0Upgrade firefox-libcairo2Upgrade MozillaFirefox-translations-commonUpgrade firefox-gdk-pixbuf-query-loadersUpgrade libpython3_6m1_0Upgrade libfirefox-gthread-2_0-0Upgrade firefox-libffi7Upgrade libpython2_7-1_0-32bitUpgrade mozilla-nssUpgrade firefox-gtk3-immodule-amharicUpgrade python3-32bitUpgrade firefox-gtk3-dataUpgrade python-tkUpgrade mozilla-nsprUpgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-branding-upstreamUpgrade libsoftokn3Upgrade mozilla-nss-certs-32bitUpgrade MozillaFirefoxUpgrade python3-base-32bitUpgrade libfreebl3-32bitUpgrade mozilla-nss-toolsUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-gtk3-immodule-multipressUpgrade python3-tkUpgrade python-demoUpgrade python36-baseUpgrade python-doc-pdfUpgrade mozilla-nss-develUpgrade python-base-x86Upgrade firefox-gtk3-immodule-thaiUpgrade firefox-gtk3-immodules-tigrignaUpgrade python-cursesUpgrade mozilla-nspr-32bitUpgrade MozillaFirefox-translations-otherUpgrade libpython3_6m1_0-32bitUpgrade firefox-libharfbuzz0Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-glib2-langUpgrade mozilla-nss-certsUpgrade python-develUpgrade firefox-gtk3-toolsUpgrade libfreebl3Upgrade python3-cursesUpgrade python3-testsuiteUpgrade firefox-gtk3-immodule-inuktitutUpgrade python3Upgrade mozilla-nss-32bitUpgrade libpython2_6-1_0-32bitUpgrade python-xml | Apr 19, 2018 | Mar 1, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 1, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub