Описание
In lsx_aiffstartread in aiff.c in Sound eXchange (SoX) 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | sox | Will not fix | ||
| Red Hat Enterprise Linux 6 | sox | Will not fix | ||
| Red Hat Enterprise Linux 7 | sox | Will not fix |
Показывать по
10
Дополнительная информация
Статус:
Low
Дефект:
CWE-416
https://bugzilla.redhat.com/show_bug.cgi?id=1510923sox: Use-after-free in lsx_aiffstartread
EPSS
Процентиль: 73%
0.01495
Низкий
3.3 Low
CVSS3
Связанные уязвимости
CVSS3: 5.5
ubuntu
почти 9 лет назад
In lsx_aiffstartread in aiff.c in Sound eXchange (SoX) 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file.
CVSS3: 5.5
nvd
почти 9 лет назад
In lsx_aiffstartread in aiff.c in Sound eXchange (SoX) 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file.
CVSS3: 5.5
debian
почти 9 лет назад
In lsx_aiffstartread in aiff.c in Sound eXchange (SoX) 14.4.2, there i ...
CVSS3: 5.5
github
больше 4 лет назад
In lsx_aiffstartread in aiff.c in Sound eXchange (SoX) 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file.
EPSS
Процентиль: 73%
0.01495
Низкий
3.3 Low
CVSS3