CVE-2019-8356

2019-02-1500:00:00

ubuntu.com

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

46.3%

JSON

An issue was discovered in SoX 14.4.2. One of the arguments to bitrv2 in
fft4g.c is not guarded, such that it can lead to write access outside of
the statically declared array, aka a stack-based buffer overflow.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchsox< 14.4.2-3ubuntu0.18.04.1UNKNOWN
ubuntu19.04noarchsox< 14.4.2-3ubuntu0.19.04.1UNKNOWN
ubuntu19.10noarchsox< 14.4.2+git20190427-1UNKNOWN
ubuntu20.04noarchsox< 14.4.2+git20190427-1UNKNOWN
ubuntu20.10noarchsox< 14.4.2+git20190427-1UNKNOWN
ubuntu21.04noarchsox< 14.4.2+git20190427-1UNKNOWN
ubuntu21.10noarchsox< 14.4.2+git20190427-1UNKNOWN
ubuntu22.04noarchsox< 14.4.2+git20190427-1UNKNOWN
ubuntu14.04noarchsox< 14.4.1-3ubuntu1.1+esm1UNKNOWN
ubuntu16.04noarchsox< 14.4.1-5+deb8u4ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	sox	< 14.4.2-3ubuntu0.18.04.1	UNKNOWN
ubuntu	19.04	noarch	sox	< 14.4.2-3ubuntu0.19.04.1	UNKNOWN
ubuntu	19.10	noarch	sox	< 14.4.2+git20190427-1	UNKNOWN
ubuntu	20.04	noarch	sox	< 14.4.2+git20190427-1	UNKNOWN
ubuntu	20.10	noarch	sox	< 14.4.2+git20190427-1	UNKNOWN
ubuntu	21.04	noarch	sox	< 14.4.2+git20190427-1	UNKNOWN
ubuntu	21.10	noarch	sox	< 14.4.2+git20190427-1	UNKNOWN
ubuntu	22.04	noarch	sox	< 14.4.2+git20190427-1	UNKNOWN
ubuntu	14.04	noarch	sox	< 14.4.1-3ubuntu1.1+esm1	UNKNOWN
ubuntu	16.04	noarch	sox	< 14.4.1-5+deb8u4ubuntu0.1	UNKNOWN