Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2019-1010004
HistoryJul 15, 2019 - 2:15 a.m.

CVE-2019-1010004

2019-07-1502:15:10
CWE-125
[email protected]
web.nvd.nist.gov
8

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.2

Confidence

High

EPSS

0.01

Percentile

83.8%

JSON

SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: read_samples function at xa.c:219. The attack vector is: Victim must open specially crafted .xa file. NOTE: this may overlap CVE-2017-18189.

Affected configurations

Nvd
Node
sound_exchange_projectsound_exchangeRange≤14.4.2
VendorProductVersionCPE
sound_exchange_projectsound_exchange*cpe:2.3:a:sound_exchange_project:sound_exchange:*:*:*:*:*:*:*:*

Related

ubuntucve 2
cve 2
cvelist 2
debiancve 2
prion 2
nessus 16
openvas 7
redhatcve 2
veracode 2
osv 3
redhat 1
amazon 1
nvd 1
fedora 2
oraclelinux 1
alpinelinux 1
centos 1
debian 1
mageia 1
ubuntucve
ubuntucve
CVE-2019-1010004
2019-07-15 00:00:00
CVE-2017-18189
2018-02-15 00:00:00
cve
cve
CVE-2019-1010004
2019-07-15 02:15:10
CVE-2017-18189
2018-02-15 10:29:00
cvelist
cvelist
CVE-2019-1010004
2019-07-15 01:44:34
CVE-2017-18189
2018-02-15 10:00:00
debiancve
debiancve
CVE-2019-1010004
2019-07-15 02:15:10
CVE-2017-18189
2018-02-15 10:29:00
prion
prion
Design/Logic Flaw
2019-07-15 02:15:00
Null pointer dereference
2018-02-15 10:29:00
nessus
nessus
Scientific Linux Security Update : sox on SL7.x x86_64 (20190806)
2019-08-27 00:00:00
NewStart CGSL CORE 5.04 / MAIN 5.04 : sox Vulnerability (NS-SA-2019-0203)
2019-10-15 00:00:00
Amazon Linux 2 : sox (ALAS-2019-1352)
2019-11-07 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-1695-1)
2019-02-27 00:00:00
Fedora: Security Advisory for sox (FEDORA-2020-cb7b7181a0)
2020-02-08 00:00:00
Huawei EulerOS: Security Advisory for sox (EulerOS-SA-2018-1084)
2020-01-23 00:00:00
redhatcve
redhatcve
CVE-2019-1010004
2019-07-17 07:54:51
CVE-2017-18189
2018-02-15 18:19:50
veracode
veracode
Denial Of Service (DoS)
2020-12-06 03:58:28
Denial Of Service (DoS)
2020-12-06 04:49:39
osv
osv
sox - security update
2019-02-28 00:00:00
sox - security update
2017-11-30 00:00:00
libsox3-14.4.2-5.17 on GA media
2024-06-15 00:00:00
redhat
redhat
(RHSA-2019:2283) Low: sox security update
2019-08-06 08:21:10
amazon
amazon
Low: sox
2019-11-04 22:27:00
nvd
nvd
CVE-2017-18189
2018-02-15 10:29:00
fedora
fedora
[SECURITY] Fedora 31 Update: sox-14.4.2.0-28.fc31
2020-02-03 01:22:20
[SECURITY] Fedora 30 Update: sox-14.4.2.0-28.fc30
2020-02-08 01:39:56
oraclelinux
oraclelinux
sox security update
2019-08-13 00:00:00
alpinelinux
alpinelinux
CVE-2017-18189
2018-02-15 10:29:00
centos
centos
sox security update
2019-08-30 04:21:10
debian
debian
[SECURITY] [DLA 1695-1] sox security update
2019-02-28 12:49:02
mageia
mageia
Updated sox packages fix security vulnerabilities
2018-04-30 22:08:07

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.2

Confidence

High

EPSS

0.01

Percentile

83.8%

JSON
Related for NVD:CVE-2019-1010004
ubuntucve2cve2cvelist2debiancve2prion2nessus16openvas7redhatcve2veracode2osv3redhat1amazon1nvd1fedora2oraclelinux1alpinelinux1centos1debian1mageia1