Lucene search
K

45 matches found

OSV
OSV
added 2022/08/25 8:15 p.m.1 views

AZL-44017 CVE-2021-33844 affecting package sox 14.4.2.0-34

A floating point exception divide-by-zero issue was discovered in SoX in functon startread of wav.c file. An attacker with a crafted wav file, could cause an application to crash...

5.5CVSS6.7AI score0.001EPSS
Exploits1References1
OSV
OSV
added 2022/08/25 8:15 p.m.1 views

DEBIAN-CVE-2021-33844

A floating point exception divide-by-zero issue was discovered in SoX in functon startread of wav.c file. An attacker with a crafted wav file, could cause an application to crash...

5.5CVSS7AI score0.001EPSS
Exploits1References1
OSV
OSV
added 2022/08/25 8:15 p.m.1 views

DEBIAN-CVE-2021-23172

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash...

5.5CVSS6.9AI score0.00221EPSS
Exploits1References1
OSV
OSV
added 2022/08/25 8:15 p.m.1 views

AZL-44781 CVE-2021-23172 affecting package sox 14.4.2.0-34

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash...

5.5CVSS6.7AI score0.00221EPSS
Exploits1References1
OSV
OSV
added 2022/08/25 8:15 p.m.1 views

AZL-43585 CVE-2021-23172 affecting package sox 14.4.2.0-34

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash...

5.5CVSS6.7AI score0.00221EPSS
Exploits1References1
OSV
OSV
added 2022/08/25 8:15 p.m.1 views

UBUNTU-CVE-2021-23172

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash...

5.5CVSS6.7AI score0.00221EPSS
Exploits1References7
Cvelist
Cvelist
added 2022/08/25 7:36 p.m.20 views

CVE-2021-23172

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash...

7.1AI score0.00221EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/08/25 12:0 a.m.1 views

SoX 数字错误漏洞

SoX is a set of open source audio processing tools. The product supports playing, converting and recording audio in multiple formats. A security vulnerability exists in SoX, which stems from a floating point exception in the startread function of its wav.c component that causes the application to...

5.5CVSS8.3AI score0.001EPSS
Exploits1References13
Tenable Nessus
Tenable Nessus
added 2019/08/27 12:0 a.m.32 views

Scientific Linux Security Update : sox on SL7.x x86_64 (20190806)

Security Fixes : - sox: NULL pointer dereference in startread function in xa.c CVE-2017-18189 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128262; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

7.5CVSS6AI score0.05714EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2019/08/06 1:34 p.m.1 views

sox: NULL pointer dereference in startread function in xa.c

A NULL pointer dereference flaw found in the way SoX handled processing of AIFF files. An attacker could potentially use this flaw to crash the SoX application by tricking it into processing crafted AIFF files...

7.5CVSS5.8AI score0.05714EPSS
Exploits1References5
OSV
OSV
added 2019/07/14 4:15 p.m.1 views

DEBIAN-CVE-2019-13590

An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h startread function, there is an integer overflow on the result of integer addition wraparound to 0 fed into the lsxcalloc macro that wraps malloc. When a NULL pointer is returned, it is used without a prior check that it is a valid...

5.5CVSS7.1AI score0.00213EPSS
Exploits1References1
NVD
NVD
added 2018/02/15 10:29 a.m.21 views

CVE-2017-18189

In the startread function in xa.c in Sound eXchange SoX through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service...

7.5CVSS6.1AI score0.05714EPSS
Exploits1References6
OSV
OSV
added 2018/02/15 10:29 a.m.0 views

UBUNTU-CVE-2017-18189

In the startread function in xa.c in Sound eXchange SoX through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service...

7.5CVSS6.7AI score0.05714EPSS
Exploits1References4
Prion
Prion
added 2018/02/15 10:29 a.m.22 views

Null pointer dereference

In the startread function in xa.c in Sound eXchange SoX through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service...

5CVSS6.1AI score0.05714EPSS
Exploits1References6Affected Software2
Cvelist
Cvelist
added 2018/02/15 10:0 a.m.23 views

CVE-2017-18189

In the startread function in xa.c in Sound eXchange SoX through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service...

6.1AI score0.05714EPSS
Exploits1References6
AlpineLinux
AlpineLinux
added 2018/02/15 10:0 a.m.28 views

CVE-2017-18189

In the startread function in xa.c in Sound eXchange SoX through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service...

7.5CVSS6.3AI score0.05714EPSS
Exploits1
CVE
CVE
added 2018/02/15 10:0 a.m.164 views

CVE-2017-18189

SoX CVE-2017-18189 is a NULL pointer dereference in the startread function (xa.c) that occurs when a crafted header specifies zero channels. The issue can cause an infinite loop and a subsequent crash/denial of service. Affected product: SoX up to version 14.4.2. The vulnerability is exploitable ...

7.5CVSS6AI score0.05714EPSS
Exploits1References6Affected Software1
Debian CVE
Debian CVE
added 2018/02/15 10:0 a.m.24 views

CVE-2017-18189

In the startread function in xa.c in Sound eXchange SoX through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service...

7.5CVSS6.4AI score0.05714EPSS
Exploits1
OSV
OSV
added 2017/07/31 1:29 p.m.0 views

DEBIAN-CVE-2017-11332

The startread function in wav.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted wav file...

5.5CVSS5.2AI score0.02044EPSS
Exploits4References1
Prion
Prion
added 2017/07/31 1:29 p.m.14 views

Denial of service

The startread function in wav.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted wav file...

4.3CVSS5.4AI score0.02044EPSS
Exploits4References5Affected Software2
Rows per page
Query Builder