Lucene search

K
nvd[email protected]NVD:CVE-2021-23210
HistoryAug 25, 2022 - 8:15 p.m.

CVE-2021-23210

2022-08-2520:15:09
CWE-369
web.nvd.nist.gov
9
sox
divide-by-zero
read_samples
voc.c
vulnerability
file
crash

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

39.7%

A floating point exception (divide-by-zero) issue was discovered in SoX in functon read_samples() of voc.c file. An attacker with a crafted file, could cause an application to crash.

Affected configurations

Nvd
Node
sox_projectsoxMatch14.4.2-7
VendorProductVersionCPE
sox_projectsox14.4.2-7cpe:2.3:a:sox_project:sox:14.4.2-7:*:*:*:*:*:*:*

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

39.7%