Lucene search
+L

72 matches found

OSV
OSV
added 2022/08/25 8:15 p.m.4 views

UBUNTU-CVE-2021-23172

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash...

5.5CVSS6.7AI score0.00431EPSS
Exploits1References7
Debian CVE
Debian CVE
added 2022/08/25 7:36 p.m.28 views

CVE-2021-23172

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash...

5.5CVSS7.1AI score0.00431EPSS
Exploits1
Cvelist
Cvelist
added 2022/08/25 7:36 p.m.26 views

CVE-2021-23172

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash...

7.1AI score0.00431EPSS
Exploits1References4
CVE
CVE
added 2022/08/25 7:34 p.m.138 views

CVE-2021-33844

CVE-2021-33844 is a SoX vulnerability: a floating point divide-by-zero in wav.c:startread() can crash an application when processing a crafted WAV file. The connected advisories confirm this issue across multiple distributions and note vulnerable SoX versions. In Amazon Linux 2, the fix is delive...

5.5CVSS6.6AI score0.00457EPSS
Exploits1References4Affected Software1
Debian CVE
Debian CVE
added 2022/08/25 7:34 p.m.39 views

CVE-2021-33844

A floating point exception divide-by-zero issue was discovered in SoX in functon startread of wav.c file. An attacker with a crafted wav file, could cause an application to crash...

5.5CVSS7.1AI score0.00457EPSS
Exploits1
Cvelist
Cvelist
added 2022/08/25 7:34 p.m.23 views

CVE-2021-33844

A floating point exception divide-by-zero issue was discovered in SoX in functon startread of wav.c file. An attacker with a crafted wav file, could cause an application to crash...

7.1AI score0.00457EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/08/25 12:0 a.m.5 views

SoX 缓冲区错误漏洞

SoX is a set of open source audio processing tools. It supports playing, converting, and recording audio in multiple formats. A security vulnerability exists in SoX, which stems from a heap buffer overflow in the startread function of its hcom.c component that causes the application to crash when...

5.5CVSS8.6AI score0.00431EPSS
Exploits1References10
CNNVD
CNNVD
added 2022/08/25 12:0 a.m.4 views

SoX 数字错误漏洞

SoX is a set of open source audio processing tools. The product supports playing, converting and recording audio in multiple formats. A security vulnerability exists in SoX, which stems from a floating point exception in the startread function of its wav.c component that causes the application to...

5.5CVSS8.3AI score0.00457EPSS
Exploits1References13
RedhatCVE
RedhatCVE
added 2021/06/24 7:57 a.m.50 views

CVE-2021-23172

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash...

5.5CVSS1.9AI score0.00431EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2019/08/27 12:0 a.m.32 views

Scientific Linux Security Update : sox on SL7.x x86_64 (20190806)

Security Fixes : - sox: NULL pointer dereference in startread function in xa.c CVE-2017-18189 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128262; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

7.5CVSS6AI score0.05151EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2019/08/20 12:0 a.m.8 views

The vulnerability of the `startread` function in the `libsox.a` library of the Sound Exchange (SoX) editor allows a attacker to cause a service failure.

The vulnerability of the startread function in sox-fmt.h of the libsox.a library, a part of the Sound Exchange SoX audio editor, is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

7.8CVSS5.5AI score0.01059EPSS
Exploits1References8Affected Software3
RedHat Linux
RedHat Linux
added 2019/08/06 1:34 p.m.4 views

sox: NULL pointer dereference in startread function in xa.c

A NULL pointer dereference flaw found in the way SoX handled processing of AIFF files. An attacker could potentially use this flaw to crash the SoX application by tricking it into processing crafted AIFF files...

7.5CVSS5.8AI score0.05151EPSS
Exploits1References5
OSV
OSV
added 2019/07/14 4:15 p.m.6 views

AZL-43633 CVE-2019-13590 affecting package sox 14.4.2.0-34

An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h startread function, there is an integer overflow on the result of integer addition wraparound to 0 fed into the lsxcalloc macro that wraps malloc. When a NULL pointer is returned, it is used without a prior check that it is a valid...

5.5CVSS6.8AI score0.01059EPSS
Exploits1References1
OSV
OSV
added 2019/07/14 4:15 p.m.1 views

DEBIAN-CVE-2019-13590

An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h startread function, there is an integer overflow on the result of integer addition wraparound to 0 fed into the lsxcalloc macro that wraps malloc. When a NULL pointer is returned, it is used without a prior check that it is a valid...

5.5CVSS7.1AI score0.01059EPSS
Exploits1References1
OSV
OSV
added 2019/07/14 4:15 p.m.4 views

AZL-44592 CVE-2019-13590 affecting package sox 14.4.2.0-34

An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h startread function, there is an integer overflow on the result of integer addition wraparound to 0 fed into the lsxcalloc macro that wraps malloc. When a NULL pointer is returned, it is used without a prior check that it is a valid...

5.5CVSS6.8AI score0.01059EPSS
Exploits1References1
OSV
OSV
added 2019/07/14 4:15 p.m.13 views

UBUNTU-CVE-2019-13590

An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h startread function, there is an integer overflow on the result of integer addition wraparound to 0 fed into the lsxcalloc macro that wraps malloc. When a NULL pointer is returned, it is used without a prior check that it is a valid...

5.5CVSS6.9AI score0.01059EPSS
Exploits1References4
NVD
NVD
added 2018/02/15 10:29 a.m.24 views

CVE-2017-18189

In the startread function in xa.c in Sound eXchange SoX through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service...

7.5CVSS6.1AI score0.05151EPSS
Exploits1References6
OSV
OSV
added 2018/02/15 10:29 a.m.3 views

DEBIAN-CVE-2017-18189

In the startread function in xa.c in Sound eXchange SoX through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service...

7.5CVSS6.2AI score0.05151EPSS
Exploits1References1
Prion
Prion
added 2018/02/15 10:29 a.m.24 views

Null pointer dereference

In the startread function in xa.c in Sound eXchange SoX through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service...

5CVSS6.1AI score0.05151EPSS
Exploits1References6Affected Software2
OSV
OSV
added 2018/02/15 10:29 a.m.3 views

UBUNTU-CVE-2017-18189

In the startread function in xa.c in Sound eXchange SoX through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service...

7.5CVSS6.7AI score0.05151EPSS
Exploits1References4
Rows per page
Query Builder