Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2021-23159

Опубликовано: 20 апр. 2021
Источник: redhat
CVSS3: 4

Описание

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsx_read_w_buf() in formats_i.c file. The vulnerability is exploitable with a crafted file, that could cause an application to crash.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5soxOut of support scope
Red Hat Enterprise Linux 7soxOut of support scope
Red Hat Enterprise Linux AI (RHEL AI)soxFix deferred

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-120
https://bugzilla.redhat.com/show_bug.cgi?id=1975671sox: heap based overflow in formats_i.c

4 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 3 лет назад

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsx_read_w_buf() in formats_i.c file. The vulnerability is exploitable with a crafted file, that could cause an application to crash.

CVSS3: 5.5
nvd
больше 3 лет назад

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsx_read_w_buf() in formats_i.c file. The vulnerability is exploitable with a crafted file, that could cause an application to crash.

CVSS3: 5.5
debian
больше 3 лет назад

A vulnerability was found in SoX, where a heap-buffer-overflow occurs ...

CVSS3: 5.5
github
больше 3 лет назад

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsx_read_w_buf() in formats_i.c file. The vulnerability is exploitable with a crafted file, that could cause an application to crash.

CVSS3: 5.5
fstec
почти 5 лет назад

Уязвимость функции lsx_read_w_buf() компонента formats_i.c программы обработки звука SoX, позволяющая нарушителю вызвать отказ в обслуживании

4 Medium

CVSS3