Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2021-23172

Опубликовано: 20 апр. 2021
Источник: redhat
CVSS3: 3.3

Описание

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5soxOut of support scope
Red Hat Enterprise Linux 7soxOut of support scope
Red Hat Enterprise Linux AI (RHEL AI)soxFix deferred

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-120

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 3 лет назад

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash.

CVSS3: 5.5
nvd
больше 3 лет назад

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash.

CVSS3: 5.5
debian
больше 3 лет назад

A vulnerability was found in SoX, where a heap-buffer-overflow occurs ...

CVSS3: 5.5
github
больше 3 лет назад

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash.

CVSS3: 5.5
fstec
почти 5 лет назад

Уязвимость функции startread() компонента hcom.c программы обработки звука SoX, позволяющая нарушителю вызвать отказ в обслуживании

3.3 Low

CVSS3