Lucene search

K
ubuntucveUbuntu.comUB:CVE-2019-8355
HistoryFeb 15, 2019 - 12:00 a.m.

CVE-2019-8355

2019-02-1500:00:00
ubuntu.com
ubuntu.com
10

0.001 Low

EPSS

Percentile

50.6%

An issue was discovered in SoX 14.4.2. In xmalloc.h, there is an integer
overflow on the result of multiplication fed into the lsx_valloc macro that
wraps malloc. When the buffer is allocated, it is smaller than expected,
leading to a heap-based buffer overflow in channels_start in remix.c.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchsox< 14.4.2-3ubuntu0.18.04.1UNKNOWN
ubuntu19.04noarchsox< 14.4.2-3ubuntu0.19.04.1UNKNOWN
ubuntu19.10noarchsox< 14.4.2+git20190427-1UNKNOWN
ubuntu20.04noarchsox< 14.4.2+git20190427-1UNKNOWN
ubuntu20.10noarchsox< 14.4.2+git20190427-1UNKNOWN
ubuntu21.04noarchsox< 14.4.2+git20190427-1UNKNOWN
ubuntu21.10noarchsox< 14.4.2+git20190427-1UNKNOWN
ubuntu22.04noarchsox< 14.4.2+git20190427-1UNKNOWN
ubuntu14.04noarchsox< 14.4.1-3ubuntu1.1+esm1) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu16.04noarchsox< 14.4.1-5+deb8u4ubuntu0.1UNKNOWN