Lucene search
Gentoo FoundationMGASA-2014-0561HistoryDec 31, 2014 - 3:28 p.m.
Updated sox packages fix CVE-2014-8145
2014-12-3115:28:04
Gentoo Foundation
advisories.mageia.org
20
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.013
Percentile
86.3%
Updated sox packages fix security vulnerability: The sox command line tool is affected by two heap-based buffer overflows, respectively located in functions start_read() and AdpcmReadBlock(). A specially crafted wav file can be used to trigger the vulnerabilities (CVE-2014-8145).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 4 | noarch | sox | < 14.4.1-3.1 | sox-14.4.1-3.1.mga4 |
Related
nessus
nessus
Debian DLA-128-1 : sox security update
2015-03-26 00:00:00
Fedora 21 : sox-14.4.1-7.fc21 (2015-1943)
2015-02-24 00:00:00
Debian DLA-1687-1 : sox security update
2019-02-25 00:00:00
debian
debian
[SECURITY] [DLA 1687-1] sox security update
2019-02-24 19:56:20
[SECURITY] [DSA 3112-1] sox security update
2014-12-23 16:56:39
[SECURITY] [DSA 3112-1] sox security update
2014-12-23 16:56:39
freebsd
freebsd
sox -- input sanitization errors
2014-11-20 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-1687-1)
2019-02-24 00:00:00
Mageia: Security Advisory (MGASA-2014-0561)
2022-01-28 00:00:00
Debian: Security Advisory (DSA-3112-1)
2014-12-22 00:00:00
ubuntucve
ubuntucve
CVE-2014-8145
2014-12-31 00:00:00
veracode
veracode
Buffer Overflows
2020-12-06 04:37:53
debiancve
debiancve
CVE-2014-8145
2014-12-31 22:59:03
prion
prion
Heap overflow
2014-12-31 22:59:00
securityvulns
securityvulns
SoX buffer overflows
2014-12-23 00:00:00
[oCERT-2014-010] SoX input sanitization errors
2014-12-23 00:00:00
gentoo
gentoo
SoX: User-assisted execution of arbitrary code
2016-12-11 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: sox-14.4.1-7.fc21
2015-02-23 23:27:31
osv
osv
sox - security update
2019-02-24 00:00:00
sox - security update
2015-01-03 00:00:00
nvd
nvd
CVE-2014-8145
2014-12-31 22:59:03
cvelist
cvelist
CVE-2014-8145
2014-12-31 22:00:00
cve
cve
CVE-2014-8145
2014-12-31 22:59:03
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.013
Percentile
86.3%
Related for MGASA-2014-0561