Lucene search
HistoryAug 25, 2022 - 8:15 p.m.
CVE-2021-23172
sox
heap-buffer-overflow
startread
hcom.c
vulnerability
exploitable
crafted file
application crash
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
34.5%
A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash.
Affected configurations
Node
sox_projectsoxMatch14.4.2-7
Related
ubuntucve
ubuntucve
CVE-2021-23172
2022-08-25 00:00:00
debiancve
debiancve
CVE-2021-23172
2022-08-25 20:15:08
veracode
veracode
Denial Of Service (DoS)
2022-08-26 06:22:36
cve
cve
CVE-2021-23172
2022-08-25 20:15:08
prion
prion
Heap overflow
2022-08-25 20:15:00
redhatcve
redhatcve
CVE-2021-23172
2021-06-24 07:57:24
cvelist
cvelist
CVE-2021-23172
2022-08-25 19:36:27
openvas
openvas
Debian: Security Advisory (DSA-5356-1)
2023-02-23 00:00:00
Ubuntu: Security Advisory (USN-5904-1)
2023-03-03 00:00:00
Ubuntu: Security Advisory (USN-5904-2)
2023-03-21 00:00:00
debian
debian
[SECURITY] [DSA 5356-1] sox security update
2023-02-20 19:08:52
[SECURITY] [DLA 3315-1] sox security update
2023-02-10 06:10:28
nessus
nessus
Debian DSA-5356-1 : sox - security update
2023-02-22 00:00:00
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : SoX vulnerabilities (USN-5904-1)
2023-03-02 00:00:00
Debian DLA-3315-1 : sox - LTS security update
2023-02-10 00:00:00
osv
osv
sox - security update
2023-02-20 00:00:00
sox vulnerabilities
2023-03-02 11:42:50
sox - security update
2023-02-10 00:00:00
ubuntu
ubuntu
SoX regression
2023-03-20 00:00:00
SoX vulnerabilities
2023-03-02 00:00:00
mageia
mageia
Updated sox packages fix security vulnerability
2023-02-27 23:27:16
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
34.5%
Related for NVD:CVE-2021-23172