ALT-PU-2015-1234-2
Closed vulnerabilities
Published: 2021-07-09
BDU:2023-01677
Уязвимость функции lsx_adpcm_init программы обработки звука SoX, позволяющая нарушителю получить доступ к конфиденциальным данным, а также вызвать отказ в обслуживании
Severity: CRITICAL (9.1)
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Severity: CRITICAL (9.4)
Vector: AV:N/AC:L/Au:N/C:C/I:N/A:C
References:
Published: 2014-12-31
Modified: 2025-04-12
Modified: 2025-04-12
CVE-2014-8145
Multiple heap-based buffer overflows in Sound eXchange (SoX) 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the (1) start_read or (2) AdpcmReadBlock function.
Severity: HIGH (7.5)
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
References:
- http://advisories.mageia.org/MGASA-2014-0561.html
- http://packetstormsecurity.com/files/129699/SoX-14.4.1-Heap-Buffer-Overflow.html
- http://www.debian.org/security/2014/dsa-3112
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:015
- http://www.ocert.org/advisories/ocert-2014-010.html
- http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
- http://www.securityfocus.com/bid/71774
- https://lists.debian.org/debian-lts-announce/2019/02/msg00034.html
- https://security.gentoo.org/glsa/201612-30
- http://advisories.mageia.org/MGASA-2014-0561.html
- http://packetstormsecurity.com/files/129699/SoX-14.4.1-Heap-Buffer-Overflow.html
- http://www.debian.org/security/2014/dsa-3112
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:015
- http://www.ocert.org/advisories/ocert-2014-010.html
- http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
- http://www.securityfocus.com/bid/71774
- https://lists.debian.org/debian-lts-announce/2019/02/msg00034.html
- https://security.gentoo.org/glsa/201612-30
Published: 2022-05-02
Modified: 2025-06-27
Modified: 2025-06-27
CVE-2021-3643
A flaw was found in sox 14.4.1. The lsx_adpcm_init function within libsox leads to a global-buffer-overflow. This flaw allows an attacker to input a malicious file, leading to the disclosure of sensitive information.
Severity: MEDIUM (6.4)
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Severity: CRITICAL (9.1)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
References: