Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2021-33844HistoryAug 25, 2022 - 8:15 p.m.
CVE-2021-33844
2022-08-2520:15:09
Debian Security Bug Tracker
security-tracker.debian.org
25
sox
divide-by-zero
startread
wav file
application crash
unix
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
39.7%
A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file. An attacker with a crafted wav file, could cause an application to crash.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | sox | < 14.4.2+git20190427-3.1 | sox_14.4.2+git20190427-3.1_all.deb |
| Debian | 11 | all | sox | < 14.4.2+git20190427-2+deb11u1 | sox_14.4.2+git20190427-2+deb11u1_all.deb |
| Debian | 999 | all | sox | < 14.4.2+git20190427-3.1 | sox_14.4.2+git20190427-3.1_all.deb |
| Debian | 13 | all | sox | < 14.4.2+git20190427-3.1 | sox_14.4.2+git20190427-3.1_all.deb |
Related
ubuntucve
ubuntucve
CVE-2021-33844
2022-08-25 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-08-26 06:35:26
redhatcve
redhatcve
CVE-2021-33844
2021-06-24 07:57:29
cve
cve
CVE-2021-33844
2022-08-25 20:15:09
nessus
nessus
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : SoX regression (USN-5904-2)
2023-03-21 00:00:00
Debian DSA-5356-1 : sox - security update
2023-02-22 00:00:00
nvd
nvd
CVE-2021-33844
2022-08-25 20:15:09
prion
prion
Code injection
2022-08-25 20:15:00
alpinelinux
alpinelinux
CVE-2021-33844
2022-08-25 20:15:09
cvelist
cvelist
CVE-2021-33844
2022-08-25 19:34:38
debian
debian
[SECURITY] [DSA 5356-1] sox security update
2023-02-20 19:08:52
[SECURITY] [DLA 3315-1] sox security update
2023-02-10 06:10:28
osv
osv
sox - security update
2023-02-20 00:00:00
sox vulnerabilities
2023-03-02 11:42:50
sox regression
2023-03-20 17:28:28
openvas
openvas
Debian: Security Advisory (DSA-5356-1)
2023-02-23 00:00:00
Ubuntu: Security Advisory (USN-5904-1)
2023-03-03 00:00:00
Ubuntu: Security Advisory (USN-5904-2)
2023-03-21 00:00:00
ubuntu
ubuntu
SoX vulnerabilities
2023-03-02 00:00:00
SoX regression
2023-03-20 00:00:00
mageia
mageia
Updated sox packages fix security vulnerability
2023-02-27 23:27:16
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
39.7%
Related for DEBIANCVE:CVE-2021-33844