Lucene search
Ubuntu.comUB:CVE-2023-34318HistoryJul 10, 2023 - 12:00 a.m.
CVE-2023-34318
2023-07-1000:00:00
ubuntu.com
ubuntu.com
14
heap buffer overflow
sox
startread function
denial of service
code execution
information disclosure
cve-2023-34318
cve-2021-23159
unix
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
34.5%
A heap buffer overflow vulnerability was found in sox, in the startread
function at sox/src/hcom.c:160:41. This flaw can lead to a denial of
service, code execution, or information disclosure.
Notes
| Author | Note |
|---|---|
| allenpthuang | Same fix as the one for CVE-2021-23159. |
Related
ubuntucve
ubuntucve
CVE-2021-23159
2022-08-25 00:00:00
CVE-2023-34432
2023-07-10 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-08-26 01:55:35
Buffer Overflow
2023-07-13 08:48:26
cve
cve
CVE-2023-34318
2023-07-10 18:15:10
CVE-2021-23159
2022-08-25 20:15:08
redhatcve
redhatcve
CVE-2023-34318
2023-06-06 07:55:45
CVE-2021-23159
2021-06-24 07:57:24
cvelist
cvelist
CVE-2023-34318 Heap-buffer-overflow in src/hcom.c
2023-07-10 17:16:59
CVE-2021-23159
2022-08-25 19:35:04
nvd
nvd
CVE-2023-34318
2023-07-10 18:15:10
CVE-2021-23159
2022-08-25 20:15:08
prion
prion
Heap overflow
2023-07-10 18:15:00
Heap overflow
2022-08-25 20:15:00
debiancve
debiancve
CVE-2023-34318
2023-07-10 18:15:10
CVE-2021-23159
2022-08-25 20:15:08
alpinelinux
alpinelinux
CVE-2021-23159
2022-08-25 20:15:08
osv
osv
libsox3-14.4.2-8.1 on GA media
2024-06-15 00:00:00
sox - security update
2023-02-20 00:00:00
sox regression
2023-03-20 17:28:28
nessus
nessus
openSUSE 15 Security Update : sox (openSUSE-SU-2023:0328-1)
2023-10-27 00:00:00
openSUSE 15 Security Update : sox (openSUSE-SU-2023:0329-1)
2023-10-27 00:00:00
Amazon Linux 2 : sox (ALAS-2023-2231)
2023-09-08 00:00:00
openvas
openvas
openSUSE: Security Advisory for sox (openSUSE-SU-2023:0329-1)
2024-03-04 00:00:00
Debian: Security Advisory (DSA-5356-1)
2023-02-23 00:00:00
Ubuntu: Security Advisory (USN-5904-2)
2023-03-21 00:00:00
amazon
amazon
Medium: sox
2023-08-31 22:29:00
debian
debian
[SECURITY] [DSA 5356-1] sox security update
2023-02-20 19:08:52
[SECURITY] [DLA 3315-1] sox security update
2023-02-10 06:10:28
ubuntu
ubuntu
SoX vulnerabilities
2023-03-02 00:00:00
SoX regression
2023-03-20 00:00:00
mageia
mageia
Updated sox packages fix security vulnerability
2023-02-27 23:27:16
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
34.5%
Related for UB:CVE-2023-34318