CVE-2017-15371

2017-10-1604:29:00

Debian Security Bug Tracker

security-tracker.debian.org

0.001 Low

EPSS

Percentile

50.8%

JSON

There is a reachable assertion abort in the function sox_append_comment() in formats.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.

OSVersionArchitecturePackageVersionFilename
Debian12allsox< 14.4.2-2sox_14.4.2-2_all.deb
Debian11allsox< 14.4.2-2sox_14.4.2-2_all.deb
Debian10allsox< 14.4.2-2sox_14.4.2-2_all.deb
Debian999allsox< 14.4.2-2sox_14.4.2-2_all.deb
Debian13allsox< 14.4.2-2sox_14.4.2-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	sox	< 14.4.2-2	sox_14.4.2-2_all.deb
Debian	11	all	sox	< 14.4.2-2	sox_14.4.2-2_all.deb
Debian	10	all	sox	< 14.4.2-2	sox_14.4.2-2_all.deb
Debian	999	all	sox	< 14.4.2-2	sox_14.4.2-2_all.deb
Debian	13	all	sox	< 14.4.2-2	sox_14.4.2-2_all.deb

0.001 Low

EPSS

Percentile

50.8%

JSON

Related for DEBIANCVE:CVE-2017-15371