Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-pzy5-zxy9-g7hx

Summary The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent attackers to cause a denial of service (memory corruption and application crash) via crafted arguments, as demonstrated by a call to audioop.reverse with a one-byte string, a different vulnerability than CVE-2010-1634.

Aliases

alias	CVE-2010-2089

Fixed_packages

url	pkg:deb/debian/python2.7@2.7-1?distro=bullseye
purl	pkg:deb/debian/python2.7@2.7-1?distro=bullseye
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/python2.7@2.7-1%3Fdistro=bullseye

url	pkg:deb/debian/python2.7@2.7.18-8%2Bdeb11u1?distro=bullseye
purl	pkg:deb/debian/python2.7@2.7.18-8%2Bdeb11u1?distro=bullseye
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/python2.7@2.7.18-8%252Bdeb11u1%3Fdistro=bullseye

url	pkg:ebuild/dev-lang/python@2.6.8
purl	pkg:ebuild/dev-lang/python@2.6.8
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@2.6.8

url	pkg:ebuild/dev-lang/python@2.7.3-r1
purl	pkg:ebuild/dev-lang/python@2.7.3-r1
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@2.7.3-r1

url	pkg:ebuild/dev-lang/python@3.2.5-r1
purl	pkg:ebuild/dev-lang/python@3.2.5-r1
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@3.2.5-r1

url	pkg:ebuild/dev-lang/python@3.3.2-r1
purl	pkg:ebuild/dev-lang/python@3.3.2-r1
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@3.3.2-r1

Affected_packages

url pkg:rpm/redhat/python@2.3.4-14.10?arch=el4

purl pkg:rpm/redhat/python@2.3.4-14.10?arch=el4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-425q-pchy-2yfg

vulnerability	VCID-hgg5-afas-gqem

vulnerability	VCID-nmcu-anmn-nybp

vulnerability	VCID-pzy5-zxy9-g7hx

vulnerability	VCID-qff9-jcqa-jubc

vulnerability	VCID-xqzx-p4gv-kfdw

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python@2.3.4-14.10%3Farch=el4

url pkg:rpm/redhat/python@2.4.3-43?arch=el5

purl pkg:rpm/redhat/python@2.4.3-43?arch=el5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-9qyx-2zhx-5qag

vulnerability	VCID-d5nm-cwte-qudf

vulnerability	VCID-hgg5-afas-gqem

vulnerability	VCID-kz5q-q45c-jub6

vulnerability	VCID-pzy5-zxy9-g7hx

vulnerability	VCID-ydue-93bt-e7h8

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python@2.4.3-43%3Farch=el5

References

reference_url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2089.json
reference_id
reference_type
scores
url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2089.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2010-2089

reference_id

reference_type

scores

value	0.09965
scoring_system	epss
scoring_elements	0.93176
published_at	2026-06-04T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2010-2089

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=598197
reference_id	598197
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=598197

reference_url	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/unix/dos/34145.txt
reference_id	CVE-2010-2089;OSVDB-65151
reference_type	exploit
scores
url	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/unix/dos/34145.txt

reference_url	https://www.securityfocus.com/bid/40863/info
reference_id	CVE-2010-2089;OSVDB-65151
reference_type	exploit
scores
url	https://www.securityfocus.com/bid/40863/info

reference_url	https://security.gentoo.org/glsa/201401-04
reference_id	GLSA-201401-04
reference_type
scores
url	https://security.gentoo.org/glsa/201401-04

reference_url	https://access.redhat.com/errata/RHSA-2011:0027
reference_id	RHSA-2011:0027
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2011:0027

reference_url	https://access.redhat.com/errata/RHSA-2011:0491
reference_id	RHSA-2011:0491
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2011:0491

Weaknesses

Exploits

date_added	2010-06-14
description	Python 3.2 - 'audioop' Module Memory Corruption
required_action	`null`
due_date	`null`
notes	`null`
known_ransomware_campaign_use	`true`
source_date_published	2010-06-14
exploit_type	dos
platform	unix
source_date_updated	2014-07-23
data_source	Exploit-DB
source_url	https://www.securityfocus.com/bid/40863/info

Severity_range_score null

Exploitability 0.5

Weighted_severity 0.1

Risk_score 0.1

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pzy5-zxy9-g7hx

Vulnerability Instance