Lucene search
+L

1682 matches found

CNVD
CNVD
•added 2017/08/03 12:00 a.m.•20 views

Sound eXchange 'startread' Function Denial of Service Vulnerability

Sound eXchange SoX is a set of open source audio processing tools. The tool supports playback, conversion and recording of multiple audio format files. A security vulnerability exists in the 'startread' function of the wav.c file in SoX version 14.4.2. A remote attacker can exploit this...

5.5CVSS6.8AI score0.06599EPSS
SaveExploits4References1
CNVD
CNVD
•added 2017/08/03 12:00 a.m.•46 views

Xiph.Org libvorbis lib/block.c file denial of service vulnerability

Xiph.Org libvorbis is an open source audio music encoding and decoding function library . A security vulnerability exists in the 'vorbisanalysiswrote' function in the lib/block.c file in Xiph.Org libvorbis version 1.3.5. A remote attacker can exploit this vulnerability to cause a denial of servic...

5.5CVSS6.8AI score0.04838EPSS
SaveExploits3References1
NVD
NVD
•added 2017/07/31 1:29 p.m.•21 views

CVE-2017-11359

The wavwritehdr function in wav.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted snd file, during conversion to a wav file...

5.5CVSS5.2AI score0.06599EPSS
SaveExploits4References5
OSV
OSV
•added 2017/07/31 1:29 p.m.•12 views

DEBIAN-CVE-2017-11359

The wavwritehdr function in wav.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted snd file, during conversion to a wav file...

5.5CVSS6.6AI score0.06599EPSS
SaveExploits4References1
Prion
Prion
•added 2017/07/31 1:29 p.m.•32 views

Design/Logic Flaw

The wavopen function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service memory allocation error via a crafted wav file...

4.3CVSS5.3AI score0.03793EPSS
SaveExploits3References2Affected Software1
Prion
Prion
•added 2017/07/31 1:29 p.m.•21 views

Denial of service

The startread function in wav.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted wav file...

4.3CVSS5.4AI score0.06599EPSS
SaveExploits4References5Affected Software2
Prion
Prion
•added 2017/07/31 1:29 p.m.•26 views

Design/Logic Flaw

The vorbisanalysiswrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service OOM via a crafted wav file...

4.3CVSS5.3AI score0.04838EPSS
SaveExploits3References4Affected Software1
UbuntuCve
UbuntuCve
•added 2017/07/31 1:29 p.m.•32 views

CVE-2017-11331

The wavopen function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service memory allocation error via a crafted wav file...

5.5CVSS6.1AI score0.03793EPSS
SaveExploits3References2
OSV
OSV
•added 2017/07/31 1:29 p.m.•15 views

CVE-2017-11332

The startread function in wav.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted wav file...

5.5CVSS6AI score
SaveExploits0References5
OSV
OSV
•added 2017/07/31 1:29 p.m.•20 views

CVE-2017-11333

The vorbisanalysiswrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service OOM via a crafted wav file...

5.5CVSS5.7AI score
SaveExploits0References4
OSV
OSV
•added 2017/07/31 1:29 p.m.•16 views

CVE-2017-11331

The wavopen function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service memory allocation error via a crafted wav file...

5.5CVSS5.2AI score
SaveExploits0References2
OSV
OSV
•added 2017/07/31 1:29 p.m.•8 views

DEBIAN-CVE-2017-11332

The startread function in wav.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted wav file...

5.5CVSS5.2AI score0.06599EPSS
SaveExploits4References1
OSV
OSV
•added 2017/07/31 1:29 p.m.•8 views

UBUNTU-CVE-2017-11332

The startread function in wav.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted wav file...

5.5CVSS5.8AI score0.06599EPSS
SaveExploits4References3
Snyk
Snyk
•added 2017/07/31 1:29 p.m.•4 views

Improper Access Control

Overview Affected versions of this package are vulnerable to Improper Access Control. The vorbisanalysiswrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service OOM via a crafted wav file. Remediation There is no fixed version for vorbis...

5.5CVSS6.8AI score0.04838EPSS
SaveExploits3References2
OSV
OSV
•added 2017/07/31 1:29 p.m.•18 views

UBUNTU-CVE-2017-11331

The wavopen function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service memory allocation error via a crafted wav file...

5.5CVSS6AI score0.03793EPSS
SaveExploits3References3
UbuntuCve
UbuntuCve
•added 2017/07/31 1:29 p.m.•37 views

CVE-2017-11332

The startread function in wav.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted wav file...

5.5CVSS6.4AI score0.06599EPSS
SaveExploits4References2
UbuntuCve
UbuntuCve
•added 2017/07/31 1:29 p.m.•37 views

CVE-2017-11333

The vorbisanalysiswrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service OOM via a crafted wav file...

5.5CVSS6.5AI score0.04838EPSS
SaveExploits3References3
Prion
Prion
•added 2017/07/31 1:29 p.m.•25 views

Design/Logic Flaw

The wavwritehdr function in wav.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted snd file, during conversion to a wav file...

4.3CVSS5.4AI score0.06599EPSS
SaveExploits4References5Affected Software2
NVD
NVD
•added 2017/07/31 1:29 p.m.•40 views

CVE-2017-11331

The wavopen function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service memory allocation error via a crafted wav file...

5.5CVSS5.2AI score0.03793EPSS
SaveExploits3References2
NVD
NVD
•added 2017/07/31 1:29 p.m.•23 views

CVE-2017-11332

The startread function in wav.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted wav file...

5.5CVSS5.2AI score0.06599EPSS
SaveExploits4References5
Rows per page
Query Builder