Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-15372

Опубликовано: 11 окт. 2017
Источник: redhat
CVSS3: 3.3
EPSS Низкий

Описание

There is a stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function of adpcm.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5soxWill not fix
Red Hat Enterprise Linux 6soxWill not fix
Red Hat Enterprise Linux 7soxWill not fix

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-121
https://bugzilla.redhat.com/show_bug.cgi?id=1510919sox: Stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function

EPSS

Процентиль: 70%
0.00616
Низкий

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 8 лет назад

There is a stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function of adpcm.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.

CVSS3: 5.5
nvd
больше 8 лет назад

There is a stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function of adpcm.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.

CVSS3: 5.5
debian
больше 8 лет назад

There is a stack-based buffer overflow in the lsx_ms_adpcm_block_expan ...

CVSS3: 5.5
github
больше 3 лет назад

There is a stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function of adpcm.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.

EPSS

Процентиль: 70%
0.00616
Низкий

3.3 Low

CVSS3