Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:41253
HistoryJul 13, 2023 - 8:14 a.m.

Denial Of Service (DoS)

2023-07-1308:14:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
denial of service
libsox.so
read_samples
voc.c
floating point exception
application crash

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

25.6%

libsox.so is vulnerable to Denial Of Service (DoS). The vulnerability exists in read_samples function at voc.c due to a floating point exception which allows an attacker to cause an application crash.

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

25.6%