Lucene search

K
gentooGentoo FoundationGLSA-201810-02
HistoryOct 06, 2018 - 12:00 a.m.

SoX: Multiple vulnerabilities

2018-10-0600:00:00
Gentoo Foundation
security.gentoo.org
500

0.005 Low

EPSS

Percentile

75.3%

Background

SoX is a command line utility that can convert various formats of computer audio files in to other formats.

Description

Multiple vulnerabilities have been discovered in SoX. Please review the referenced CVE identifiers for details.

Impact

A remote attacker, by enticing a user to process a crafted WAV, HCOM, SND, or AIFF file, could cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All SoX users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=media-sound/sox-14.4.2-r1"
OSVersionArchitecturePackageVersionFilename
Gentooanyallmedia-sound/sox< 14.4.2-r1UNKNOWN