Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-34432HistoryJul 10, 2023 - 9:15 p.m.
CVE-2023-34432
2023-07-1021:15:10
Debian Security Bug Tracker
security-tracker.debian.org
8
vulnerability
denial of service
code execution
information disclosure
unix
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
23.2%
A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16. This flaw can lead to a denial of service, code execution, or information disclosure.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | sox | < 14.4.2+git20190427-3.2 | sox_14.4.2+git20190427-3.2_all.deb |
| Debian | 11 | all | sox | < 14.4.2+git20190427-2+deb11u1 | sox_14.4.2+git20190427-2+deb11u1_all.deb |
| Debian | 10 | all | sox | < 14.4.2+git20190427-1+deb10u1 | sox_14.4.2+git20190427-1+deb10u1_all.deb |
| Debian | 999 | all | sox | < 14.4.2+git20190427-3.2 | sox_14.4.2+git20190427-3.2_all.deb |
| Debian | 13 | all | sox | < 14.4.2+git20190427-3.2 | sox_14.4.2+git20190427-3.2_all.deb |
Related
cvelist
cvelist
CVE-2023-34432 Heap-buffer-overflow in src/formats_i.c
2023-07-10 20:05:39
cve
cve
CVE-2023-34432
2023-07-10 21:15:10
nvd
nvd
CVE-2023-34432
2023-07-10 21:15:10
prion
prion
Heap overflow
2023-07-10 21:15:00
redhatcve
redhatcve
CVE-2023-34432
2023-06-06 07:55:55
veracode
veracode
Buffer Overflow
2023-08-22 18:00:42
ubuntucve
ubuntucve
CVE-2023-34432
2023-07-10 00:00:00
nessus
nessus
Amazon Linux 2 : sox (ALAS-2023-2231)
2023-09-08 00:00:00
openSUSE 15 Security Update : sox (openSUSE-SU-2023:0328-1)
2023-10-27 00:00:00
openSUSE 15 Security Update : sox (openSUSE-SU-2023:0329-1)
2023-10-27 00:00:00
amazon
amazon
Medium: sox
2023-08-31 22:29:00
openvas
openvas
openSUSE: Security Advisory for sox (openSUSE-SU-2023:0329-1)
2024-03-04 00:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
23.2%
Related for DEBIANCVE:CVE-2023-34432