Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-1010004

Опубликовано: 15 июл. 2019
Источник: nvd
CVSS3: 5.5
CVSS2: 4.3
EPSS Низкий

Описание

SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: read_samples function at xa.c:219. The attack vector is: Victim must open specially crafted .xa file. NOTE: this may overlap CVE-2017-18189.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:sound_exchange_project:sound_exchange:*:*:*:*:*:*:*:*
Версия до 14.4.2 (включая)

EPSS

Процентиль: 62%
0.00432
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 6 лет назад

SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: read_samples function at xa.c:219. The attack vector is: Victim must open specially crafted .xa file. NOTE: this may overlap CVE-2017-18189.

CVSS3: 3.3
redhat
больше 6 лет назад

SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: read_samples function at xa.c:219. The attack vector is: Victim must open specially crafted .xa file. NOTE: this may overlap CVE-2017-18189.

CVSS3: 5.5
debian
больше 6 лет назад

SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds ...

github
больше 3 лет назад

SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: read_samples function at xa.c:219. The attack vector is: Victim must open specially crafted .xa file. NOTE: this may overlap CVE-2017-18189.

EPSS

Процентиль: 62%
0.00432
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125