Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-34432

Опубликовано: 10 июл. 2023
Источник: debian

Описание

A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16. This flaw can lead to a denial of service, code execution, or information disclosure.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
soxfixed14.4.2+git20190427-3.2package
soxfixed14.4.2+git20190427-2+deb11u1bullseyepackage
soxfixed14.4.2+git20190427-1+deb10u1busterpackage

Примечания

  • https://bugzilla.redhat.com/show_bug.cgi?id=2212291

  • https://sourceforge.net/p/sox/bugs/367/

  • Same fix as for CVE-2021-23159

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 2 лет назад

A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16. This flaw can lead to a denial of service, code execution, or information disclosure.

CVSS3: 7.8
redhat
почти 3 года назад

A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16. This flaw can lead to a denial of service, code execution, or information disclosure.

CVSS3: 7.8
nvd
больше 2 лет назад

A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16. This flaw can lead to a denial of service, code execution, or information disclosure.

CVSS3: 7.8
github
больше 2 лет назад

A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16. This flaw can lead to a denial of service, code execution, or information disclosure.

suse-cvrf
больше 2 лет назад

Security update for sox