In the startread function in xa.c in Sound eXchange (SoX) through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service.
CPE | Name | Operator | Version |
---|---|---|---|
debian_linux | eq | 8.0 | |
sound_exchange | le | 14.4.2 |
access.redhat.com/errata/RHSA-2019:2283
bugs.debian.org/cgi-bin/bugreport.cgi?bug=881121
lists.debian.org/debian-lts-announce/2019/02/msg00042.html
lists.fedoraproject.org/archives/list/[email protected]/message/62RARFRXGKPNNFFNVDV7DHJSOKAIZ3CX/
lists.fedoraproject.org/archives/list/[email protected]/message/EUKFZQSZG2ABMTAMOGBMY7MJNSGEIYTL/
public-inbox.org/sox-devel/[email protected]/raw