Lucene search
K

22 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в sox

A vulnerability was discovered in SoX, where a heap buffer overflow occurs in the startread function in the hcom.c file. This vulnerability can be exploited by using a specially crafted hcomn file, which may cause the application to crash...

5.5CVSS6.9AI score0.00221EPSS
Exploits1References2
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.4 views

Astra Linux - уязвимость в sox

The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...

5.5CVSS6.7AI score0.0373EPSS
Exploits3References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-10282

Malware in sbrugna...

5.5CVSS7.1AI score0.00221EPSS
Exploits1References9
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2021-23172

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread in hcom.c file. The vulnerability is exploitable with a crafted hcom...

5.5CVSS7.1AI score0.00221EPSS
Exploits1References2
OSV
OSV
added 2023/12/15 11:6 a.m.1 views

OESA-2023-1931 sox security update

SoX is a cross-platform Windows, Linux, MacOS X, etc. command line utility that can convert various formats of computer audio files in to other formats. It can also apply various effects to these sound files, and, as an added bonus, SoX can play and record audio files on most platforms. Security...

7.8CVSS7.5AI score0.00221EPSS
Exploits5References9
ATTACKERKB
ATTACKERKB
added 2023/07/10 6:15 p.m.0 views

CVE-2023-34318

A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can lead to a denial of service, code execution, or information disclosure...

7.8CVSS6AI score0.00041EPSS
Exploits0References3
Mageia
Mageia
added 2023/02/27 8:27 p.m.108 views

Updated sox packages fix security vulnerability

CVE-2019-13590: sox-fmt validation CVE-2021-3643 and CVE-2021-23210: voc validation CVE-2021-23159 and CVE-2021-23172: hcom validation CVE-2021-33844: wav validation CVE-2021-40426: sphere validation CVE-2022-31650: aiff validation CVE-2022-31651: reject implausible rate...

10CVSS6.4AI score0.00551EPSS
Exploits8References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:43 a.m.2 views

SUSE CVE-2017-11358

The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...

5.5CVSS6.1AI score0.0373EPSS
Exploits3References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:45 a.m.0 views

SUSE CVE-2021-23172

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash...

5.5CVSS6.8AI score0.00221EPSS
Exploits1References3
OSV
OSV
added 2022/08/25 8:15 p.m.2 views

AZL-43585 CVE-2021-23172 affecting package sox 14.4.2.0-34

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash...

5.5CVSS6.7AI score0.00221EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/08/25 12:0 a.m.2 views

SoX 缓冲区错误漏洞

SoX is a set of open source audio processing tools. It supports playing, converting, and recording audio in multiple formats. A security vulnerability exists in SoX, which stems from a heap buffer overflow in the startread function of its hcom.c component that causes the application to crash when...

5.5CVSS8.6AI score0.00221EPSS
Exploits1References10
Veracode
Veracode
added 2020/12/06 4:4 a.m.23 views

Denial Of Service (DoS)

sox is vulnerable to denial of service. An attacker is able to crash the application via the readsamples function in hcom.c via a malicious hcom file...

5.5CVSS1.9AI score0.0373EPSS
Exploits3References10Affected Software1
RedhatCVE
RedhatCVE
added 2017/08/11 5:48 p.m.21 views

CVE-2017-11358

The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...

5.5CVSS4.6AI score0.0373EPSS
Exploits3References1
CNVD
CNVD
added 2017/08/02 12:0 a.m.2 views

Sound eXchange 'read_samples' Function Denial of Service Vulnerability

Sound eXchange SoX is a set of open source audio processing tools. The tool supports playback, conversion and recording of multiple audio format files. A security vulnerability exists in the 'readsamples' function of the hcom.c file in SoX version 14.4.2. A remote attacker can exploit this...

5.5CVSS5.6AI score0.0373EPSS
Exploits3References1
OSV
OSV
added 2017/07/31 1:29 p.m.1 views

DEBIAN-CVE-2017-11358

The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...

5.5CVSS6AI score0.0373EPSS
Exploits3References1
NVD
NVD
added 2017/07/31 1:29 p.m.10 views

CVE-2017-11358

The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...

5.5CVSS5.2AI score0.0373EPSS
Exploits3References9
Prion
Prion
added 2017/07/31 1:29 p.m.19 views

Design/Logic Flaw

The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...

4.3CVSS5.3AI score0.0373EPSS
Exploits3References9Affected Software2
OSV
OSV
added 2017/07/31 1:29 p.m.0 views

UBUNTU-CVE-2017-11358

The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...

5.5CVSS6.4AI score0.0373EPSS
Exploits3References3
CVE
CVE
added 2017/07/31 12:0 a.m.118 views

CVE-2017-11358

CVE-2017-11358 affects SoX (Sound eXchange) version 14.4.2, where the read_samples function in hcom.c can be triggered by a crafted HCOM file to cause an invalid memory read and application crash (DoS). Multiple connected sources corroborate the vulnerability in the same function/file and note it...

5.5CVSS5.2AI score0.0373EPSS
Exploits3References9Affected Software1
Debian CVE
Debian CVE
added 2017/07/31 12:0 a.m.23 views

CVE-2017-11358

The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...

5.5CVSS5.6AI score0.0373EPSS
Exploits3
Rows per page
Query Builder