Published: 15/02/2018 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

In the startread function in xa.c in Sound eXchange (SoX) up to and including 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote malicious user to cause a denial-of-service.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sound exchange project sound exchange
debian debian linux 8.0

Synopsis Low: sox security update Type/Severity Security Advisory: Low Topic An update for sox is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Low A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed se ...

Debian Bug report logs - #881121 sox: CVE-2017-18189: null pointer dereference while running sox Package: sox; Maintainer for sox is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Source for sox is src:sox (PTS, buildd, popcon) Reported by: Joonun Jang <joonunjang@gmailcom> Date: Wed, 8 Nov 20 ...

A NULL pointer dereference flaw found in the way SoX handled processing of AIFF files An attacker could potentially use this flaw to crash the SoX application by tricking it into processing crafted AIFF files(CVE-2017-18189) ...

A NULL pointer dereference flaw found in the way SoX handled processing of AIFF files An attacker could potentially use this flaw to crash the SoX application by tricking it into processing crafted AIFF files ...

In the startread function in xac in Sound eXchange (SoX) through 1442, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service ...

CWE-476 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=881121 https://lists.debian.org/debian-lts-announce/2019/02/msg00042.html https://access.redhat.com/errata/RHSA-2019:2283 https://public-inbox.org/sox-devel/20171109114554.16297-1-mans%40mansr.com/raw https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EUKFZQSZG2ABMTAMOGBMY7MJNSGEIYTL/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62RARFRXGKPNNFFNVDV7DHJSOKAIZ3CX/https://access.redhat.com/errata/RHSA-2019:2283 https://nvd.nist.gov https://alas.aws.amazon.com/AL2/ALAS-2019-1352.html

CVE-2017-18189

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect