Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:41255
HistoryJul 13, 2023 - 8:48 a.m.

Buffer Overflow

2023-07-1308:48:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
libsox.so
buffer overflows
startread function
hcom.c
software vulnerability
sensitive information access

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

libsox.so is vulnerable to Buffer Overflows. The vulnerability exists in the startread function at hcom.c due to not handling the buffer size which allows an attacker to cause an application crash or gain access to sensitive information.

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%