7.8
High
CVE-2023-34318 A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41
Description
A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can lead to a denial of service, code execution, or information disclosure.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| sox | Versions not published | |
| Red Hat Enterprise Linux 6 | Versions not published | |
| Red Hat Enterprise Linux 7 | Versions not published | |
| Fedora | Versions not published | |
| Extra Packages for Enterprise Linux | Versions not published |
References
- access.redhat.com access.redhat.com
- RHBZ#2212283 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of sox
The 5 CVEs of sox →
CVE-2023-34432
A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16
7.8
High
CVE-2023-32627
A floating point exception vulnerability was found in sox, in the read_samples function at sox/src/voc.c:334:18
6.2
Medium
CVE-2023-26590
A floating point exception vulnerability was found in sox, in the lsx_aiffstartwrite function at sox/src/aiff.c:622:58
6.2
Medium
CVE-2021-3643
A flaw was found in sox 14.4.1
Not rated