OPENSUSE-SU-2018:0493-1 Security update for sox

This update for sox fixes the following issues: CVE-2017-11332: Fixed the startread function in wav.c, which allowed remote attackers to cause a DoS divide-by-zero via a crafted wav file. boo1081140 CVE-2017-11358: Fixed the readsamples function in hcom.c, which allowed remote attackers to cause ...

CVE-2017-18189

A NULL pointer dereference flaw found in the way SoX handled processing of AIFF files. An attacker could potentially use this flaw to crash the SoX application by tricking it into processing crafted AIFF files...

CVE-2017-18189

In the startread function in xa.c in Sound eXchange SoX through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service...

Null pointer dereference

In the startread function in xa.c in Sound eXchange SoX through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service...

CVE-2017-18189

In the startread function in xa.c in Sound eXchange SoX through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service...

CVE-2017-18189

In the startread function in xa.c in Sound eXchange SoX through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service...

CVE-2017-18189

SoX CVE-2017-18189 is a NULL pointer dereference in the startread function (xa.c) that occurs when a crafted header specifies zero channels. The issue can cause an infinite loop and a subsequent crash/denial of service. Affected product: SoX up to version 14.4.2. The vulnerability is exploitable ...

Fedora Update for sox FEDORA-2018-ec93095a73

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 27 : sox (2018-ec93095a73)

Security fix for CVE-2017-15372, CVE-2017-15642. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[SECURITY] Fedora 27 Update: sox-14.4.2.0-16.fc27

SoX Sound eXchange is a sound file format converter. SoX can convert between many different digitized sound formats and perform simple sound manipulation functions, including sound effects...

Updated sox packages fix security vulnerability

There is a heap-based buffer overflow in the ImaExpandS function of imarw.c in Sound eXchange SoX 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file CVE-2017-15370. There is a reachable assertion abort in the function soxappendcomment in formats.c i...

MGASA-2018-0105 Updated sox packages fix security vulnerability

There is a heap-based buffer overflow in the ImaExpandS function of imarw.c in Sound eXchange SoX 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file CVE-2017-15370. There is a reachable assertion abort in the function soxappendcomment in formats.c i...

Fedora 27 : sox (2018-b528f28c59)

Security fix for CVE-2017-15370 and CVE-2017-15371 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Update for sox FEDORA-2018-b528f28c59

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for sox FEDORA-2018-b26768593c

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 26 : sox (2018-b26768593c)

Security fix for CVE-2017-15370 and CVE-2017-15371 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[SECURITY] Fedora 27 Update: sox-14.4.2.0-14.fc27

SoX Sound eXchange is a sound file format converter SoX can convert between many different digitized sound formats and perform simple sound manipulation functions, including sound effects...

[SECURITY] Fedora 26 Update: sox-14.4.2.0-14.fc26

SoX Sound eXchange is a sound file format converter SoX can convert between many different digitized sound formats and perform simple sound manipulation functions, including sound effects...

Debian DLA-1197-1 : sox security update

Various security vulnerabilities were discovered in sox, a command line utility to convert audio formats, that may lead to a denial of service application crash / infinite loop or memory corruptions by processing a malformed input file. For Debian 7 'Wheezy', these problems have been fixed in...

[SECURITY] [DLA 1197-1] sox security update

Package : sox Version : 14.4.0-3+deb7u2 CVE ID : CVE-2017-11332 CVE-2017-11358 CVE-2017-11359 CVE-2017-15370 CVE-2017-15371 CVE-2017-15372 CVE-2017-15642 Debian Bug : 870328 878810 878809 878808 882236 882144 Various security vulnerabilities were discovered in sox, a command line utility to conve...