AZL-44017 CVE-2021-33844 affecting package sox 14.4.2.0-34

A floating point exception divide-by-zero issue was discovered in SoX in functon startread of wav.c file. An attacker with a crafted wav file, could cause an application to crash...

DEBIAN-CVE-2021-33844

A floating point exception divide-by-zero issue was discovered in SoX in functon startread of wav.c file. An attacker with a crafted wav file, could cause an application to crash...

AZL-43585 CVE-2021-23172 affecting package sox 14.4.2.0-34

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash...

DEBIAN-CVE-2021-23172

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash...

AZL-44781 CVE-2021-23172 affecting package sox 14.4.2.0-34

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash...

UBUNTU-CVE-2021-23172

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash...

CVE-2021-23172

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash...

SoX 数字错误漏洞

SoX is a set of open source audio processing tools. The product supports playing, converting and recording audio in multiple formats. A security vulnerability exists in SoX, which stems from a floating point exception in the startread function of its wav.c component that causes the application to...

Scientific Linux Security Update : sox on SL7.x x86_64 (20190806)

Security Fixes : - sox: NULL pointer dereference in startread function in xa.c CVE-2017-18189 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128262; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

The vulnerability of the `startread` function in the `libsox.a` library of the Sound Exchange (SoX) editor allows a attacker to cause a service failure.

The vulnerability of the startread function in sox-fmt.h of the libsox.a library, a part of the Sound Exchange SoX audio editor, is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

sox: NULL pointer dereference in startread function in xa.c

A NULL pointer dereference flaw found in the way SoX handled processing of AIFF files. An attacker could potentially use this flaw to crash the SoX application by tricking it into processing crafted AIFF files...

DEBIAN-CVE-2019-13590

An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h startread function, there is an integer overflow on the result of integer addition wraparound to 0 fed into the lsxcalloc macro that wraps malloc. When a NULL pointer is returned, it is used without a prior check that it is a valid...

Null pointer dereference

In the startread function in xa.c in Sound eXchange SoX through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service...

CVE-2017-18189

In the startread function in xa.c in Sound eXchange SoX through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service...

UBUNTU-CVE-2017-18189

In the startread function in xa.c in Sound eXchange SoX through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service...

CVE-2017-18189

In the startread function in xa.c in Sound eXchange SoX through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service...

CVE-2017-18189

SoX CVE-2017-18189 is a NULL pointer dereference in the startread function (xa.c) that occurs when a crafted header specifies zero channels. The issue can cause an infinite loop and a subsequent crash/denial of service. Affected product: SoX up to version 14.4.2. The vulnerability is exploitable ...

CVE-2017-18189

In the startread function in xa.c in Sound eXchange SoX through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service...

CVE-2017-18189

In the startread function in xa.c in Sound eXchange SoX through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service...

Denial of service

The startread function in wav.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted wav file...