Advisory ROSA-SA-2025-2668

software: sox 14.4.2 OS: ROSA-CHROME packageevrstring: sox-14.4.2-6 CVE-ID: CVE-2022-31650 BDU-ID: 2023-01722 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the lsxaiffstartwrite function of the aiff.c component of the Sound eXchange audio editor is related to insufficient comparison. Exploitation ...

OESA-2025-1020 sox security update

SoX is a cross-platform Windows, Linux, MacOS X, etc. command line utility that can convert various formats of computer audio files in to other formats. It can also apply various effects to these sound files, and, as an added bonus, SoX can play and record audio files on most platforms. Security...

RHSA-2004:409 Red Hat Security Advisory: sox security update

Bulletin has no description...

The vulnerability of the read_samples() function in the voc.c component of the SoX sound processing software allows a hacker to cause a service failure.

The vulnerability of the readsamples function in the SoX sound processing component voc.c is related to the lack of checks for division by zero. Exploiting this vulnerability allows a attacker to cause a service failure using a specially created file...

RHSA-2019:2283 Red Hat Security Advisory: sox security update

Bulletin has no description...

CVE-2017-15371 affecting package sox for versions less than 14.4.2.0-33

CVE-2017-15371 affecting package sox for versions less than 14.4.2.0-33. A patched version of the package is available...

CVE-2017-15370 affecting package sox for versions less than 14.4.2.0-33

CVE-2017-15370 affecting package sox for versions less than 14.4.2.0-33. A patched version of the package is available...

CBL Mariner 2.0 Security Update: sox (CVE-2017-15370)

The version of sox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2017-15370 advisory. - There is a heap-based buffer overflow in the ImaExpandS function of imarw.c in Sound eXchange SoX 14.4.2. A...

CBL Mariner 2.0 Security Update: sox (CVE-2017-15371)

The version of sox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2017-15371 advisory. - There is a reachable assertion abort in the function soxappendcomment in formats.c in Sound eXchange SoX 14.4.2...

There is a reachable assertion abort in the function sox_append_comment() in formats.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.

...

CVE-2024-38436

Commugen SOX 365 – CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-38436

Commugen SOX 365 – CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-38436 Commugen SOX 365 – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Commugen SOX 365 – CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-38436 Commugen SOX 365 – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Commugen SOX 365 – CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-38436

CVE-2024-38436 concerns Commugen SOX 365 with a Cross-site Scripting (CWE-79) vulnerability due to improper neutralization of user input during web page generation. Affected software is Commugen SOX 365; exact vulnerable components/files and specific affected versions are not provided in the conn...

PT-2024-28002 · Commugen · Commugen Sox 365

Name of the Vulnerable Software and Affected Versions: Commugen SOX 365 affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, which can lead to cross-site scripting. Recommendations: At the moment, there is no information...

Malicious code in audio-mixer-sox (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e0ff0016d5ee0b83d90d996f67621a9376abd546b53fc0f20b268b559f125cb --- Credit: OpenSSF source...

MAL-2024-6720 Malicious code in audio-mixer-sox (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e0ff0016d5ee0b83d90d996f67621a9376abd546b53fc0f20b268b559f125cb --- Credit: OpenSSF source...

RHEL 6 : sox (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - sox: two heap out-of-bounds access issues oCERT-2014-010 CVE-2014-8145 - sox: Use-after-free in...

RHEL 7 : sox (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - sox: two heap out-of-bounds access issues oCERT-2014-010 CVE-2014-8145 - sox: null pointer dereference in...