Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-8145
HistoryDec 31, 2014 - 10:59 p.m.

CVE-2014-8145

2014-12-3122:59:03
CWE-119
[email protected]
web.nvd.nist.gov
3

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

5.8

Confidence

High

EPSS

0.019

Percentile

88.6%

JSON

Multiple heap-based buffer overflows in Sound eXchange (SoX) 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the (1) start_read or (2) AdpcmReadBlock function.

Affected configurations

NVD
Node
sound_exchange_projectsound_exchangeRange≤14.4.1
Node
debiandebian_linuxMatch7.0
OR
debiandebian_linuxMatch8.0
Node
oraclesolarisMatch11.2

Related

securityvulns 2
osv 2
gentoo 1
prion 1
fedora 1
openvas 6
debian 4
freebsd 1
nessus 10
cve 1
mageia 1
cvelist 1
debiancve 1
veracode 1
ubuntucve 1
securityvulns
securityvulns
SoX buffer overflows
2014-12-23 00:00:00
[oCERT-2014-010] SoX input sanitization errors
2014-12-23 00:00:00
osv
osv
sox - security update
2019-02-24 00:00:00
sox - security update
2015-01-03 00:00:00
gentoo
gentoo
SoX: User-assisted execution of arbitrary code
2016-12-11 00:00:00
prion
prion
Heap overflow
2014-12-31 22:59:00
fedora
fedora
[SECURITY] Fedora 21 Update: sox-14.4.1-7.fc21
2015-02-23 23:27:31
openvas
openvas
Debian: Security Advisory (DLA-1687-1)
2019-02-24 00:00:00
Mageia: Security Advisory (MGASA-2014-0561)
2022-01-28 00:00:00
Debian: Security Advisory (DSA-3112-1)
2014-12-22 00:00:00
debian
debian
[SECURITY] [DLA 1687-1] sox security update
2019-02-24 19:56:20
[SECURITY] [DSA 3112-1] sox security update
2014-12-23 16:56:39
[SECURITY] [DLA 128-1] sox security update
2015-01-03 21:31:52
freebsd
freebsd
sox -- input sanitization errors
2014-11-20 00:00:00
nessus
nessus
Debian DLA-128-1 : sox security update
2015-03-26 00:00:00
GLSA-201612-30 : SoX: User-assisted execution of arbitrary code
2016-12-12 00:00:00
Fedora 21 : sox-14.4.1-7.fc21 (2015-1943)
2015-02-24 00:00:00
cve
cve
CVE-2014-8145
2014-12-31 22:59:03
mageia
mageia
Updated sox packages fix CVE-2014-8145
2014-12-31 15:28:04
cvelist
cvelist
CVE-2014-8145
2014-12-31 22:00:00
debiancve
debiancve
CVE-2014-8145
2014-12-31 22:59:03
veracode
veracode
Buffer Overflows
2020-12-06 04:37:53
ubuntucve
ubuntucve
CVE-2014-8145
2014-12-31 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

5.8

Confidence

High

EPSS

0.019

Percentile

88.6%

JSON
Related for NVD:CVE-2014-8145
securityvulns2osv2gentoo1prion1fedora1openvas6debian4freebsd1nessus10cve1mageia1cvelist1debiancve1veracode1ubuntucve1