3582 matches found
Code injection
sound/usb/mixer.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service sndusbmixerinterrupt use-after-free and system crash or possibly have unspecified other impact via a crafted USB device...
CVE-2017-16529
CVE-2017-16529 affects the Linux kernel’s snd_usb_create_streams in sound/usb/card.c, allowing a local attacker to trigger an out-of-bounds read and system crash via a crafted USB device, with impact described as a denial of service and potentially other effects. The issue is present in kernels p...
CVE-2017-16529
The sndusbcreatestreams function in sound/usb/card.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of-bounds read and system crash or possibly have unspecified other impact via a crafted USB device...
CVE-2017-16528
sound/core/seqdevice.c in the Linux kernel before 4.13.4 allows local users to cause a denial of service sndrawmididevseqfree use-after-free and system crash or possibly have unspecified other impact via a crafted USB device...
UBUNTU-CVE-2017-16527
sound/usb/mixer.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service sndusbmixerinterrupt use-after-free and system crash or possibly have unspecified other impact via a crafted USB device...
UBUNTU-CVE-2017-16529
The sndusbcreatestreams function in sound/usb/card.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of-bounds read and system crash or possibly have unspecified other impact via a crafted USB device...
Sound eXchange Double Release Vulnerability
Sound eXchange SoX is a set of open source audio processing tools. The tool supports playback, conversion and recording of multiple audio format files. A double release vulnerability exists in the 'lsxaiffstartread' function of the aiff.c file in versions of SoX prior to 14.4.2. No details of the...
Security update for the Linux Kernel (important)
The openSUSE Leap 42.2 kernel was updated to 4.4.92 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-13080: Wi-Fi Protected Access WPA and WPA2 allowed reinstallation of the Group Temporal Key GTK during the group key handshake, allowing an attacker...
Sound eXchange Buffer Overflow Vulnerability (CNVD-2017-34599)
Sound eXchange SoX is a set of open source audio processing tools. The tool supports playback, conversion and recording of multiple audio format files. A stack buffer overflow vulnerability exists in the 'lsxmsadpcmblockexpandi' function of the adpcm.c file in SoX version 14.4.2. An attacker can...
Sound eXchange Buffer Overflow Vulnerability
Sound eXchange SoX is a set of open source audio processing tools. The tool supports playback, conversion and recording of multiple audio format files. A buffer overflow vulnerability exists in the 'ImaExpandS' function of the imarw.c file in SoX version 14.4.2. An attacker can exploit this...
Sound eXchange Denial of Service Vulnerability
Sound eXchange SoX is a set of open source audio processing tools. The tool supports playback, conversion and recording of multiple audio format files. A security vulnerability exists in the 'soxappendcomment' function of the forms.c file in SoX version 14.4.2. An attacker can exploit this...
Design/Logic Flaw
In lsxaiffstartread in aiff.c in Sound eXchange SoX 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file...
CVE-2017-15642
In lsxaiffstartread in aiff.c in Sound eXchange SoX 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file...
CVE-2017-15642
In lsxaiffstartread in aiff.c in Sound eXchange SoX 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file...
CVE-2017-15642
In lsxaiffstartread in aiff.c in Sound eXchange SoX 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file...
DEBIAN-CVE-2017-15642
In lsxaiffstartread in aiff.c in Sound eXchange SoX 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file...
UBUNTU-CVE-2017-15642
In lsxaiffstartread in aiff.c in Sound eXchange SoX 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file...
CVE-2017-15642
CVE-2017-15642 : SoX 14.4.2 contains a Use-After-Free vulnerability in lsx_aiffstartread (aiff.c) triggered by a malformed AIFF file. The issue arises when processing AIFF input, potentially enabling denial of service or memory corruption as described in vulnerability records. The provided source...