The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service (divide-by-zero and exception) via a crafted wav format audio file. NOTE: the vendor disputes this issue because Python applications "need to be prepared to handle a wide variety of exceptions.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Huawei Euleros 2_0_sp2 | — | Upgrade tkinterUpgrade python-develUpgrade python-libsUpgrade python | Jun 17, 2020 | Mar 1, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade tkinterUpgrade python-libsUpgrade python-develUpgrade python | Apr 16, 2020 | Mar 1, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-unversioned-commandUpgrade python2-testUpgrade python2-libsUpgrade python2Upgrade python2-devel | Mar 24, 2020 | Mar 1, 2018 |
| Suse | — | Upgrade pythonUpgrade firefox-libffi4Upgrade python3-32bitUpgrade MozillaFirefox-translations-commonUpgrade python3-toolsUpgrade python-baseUpgrade libfirefox-gio-2_0-0Upgrade firefox-libcairo2Upgrade python-32bitUpgrade firefox-libatk-1_0-0Upgrade python3-baseUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-gtk3-dataUpgrade firefox-glib2-toolsUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade libpython3_4m1_0Upgrade libfirefox-gobject-2_0-0Upgrade libpython3_6m1_0Upgrade libsoftokn3-32bitUpgrade libpython2_7-1_0Upgrade python-docUpgrade python-idleUpgrade firefox-gio-branding-upstreamUpgrade python-gdbmUpgrade python3-idleUpgrade python-x86Upgrade firefox-gtk3-langUpgrade python36Upgrade firefox-gtk3-immodule-amharicUpgrade libpython2_7-1_0-32bitUpgrade firefox-libgtk-3-0Upgrade firefox-libffi7Upgrade libpython3_4m1_0-32bitUpgrade mozilla-nssUpgrade firefox-atk-langUpgrade python-base-32bitUpgrade mozilla-nspr-develUpgrade libpython2_6-1_0Upgrade python3-dbmUpgrade firefox-libcairo-gobject2Upgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-gdk-pixbuf-langUpgrade libpython2_6-1_0-x86Upgrade firefox-gtk3-immodule-ximUpgrade libfirefox-glib-2_0-0Upgrade firefox-gdk-pixbuf-query-loadersUpgrade python3-develUpgrade python3-tkUpgrade mozilla-nss-certsUpgrade python-doc-pdfUpgrade firefox-gtk3-immodule-thaiUpgrade python-tkUpgrade libfreebl3Upgrade firefox-gtk3-toolsUpgrade python-develUpgrade MozillaFirefoxUpgrade firefox-libharfbuzz0Upgrade firefox-gtk3-immodules-tigrignaUpgrade libpython3_6m1_0-32bitUpgrade MozillaFirefox-translations-otherUpgrade python-cursesUpgrade mozilla-nspr-32bitUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade mozilla-nss-certs-32bitUpgrade firefox-glib2-langUpgrade python3-base-32bitUpgrade mozilla-nss-develUpgrade python-demoUpgrade firefox-gtk3-immodule-inuktitutUpgrade python36-baseUpgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-immodule-multipressUpgrade python-base-x86Upgrade python3-testsuiteUpgrade firefox-gtk3-branding-upstreamUpgrade libsoftokn3Upgrade MozillaFirefox-branding-SLEDUpgrade python-xmlUpgrade mozilla-nsprUpgrade libfreebl3-32bitUpgrade libpython2_6-1_0-32bitUpgrade python3Upgrade mozilla-nss-32bitUpgrade mozilla-nss-toolsUpgrade python3-curses | Apr 19, 2018 | Mar 1, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 1, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub