Уязвимость CVE-2017-11358: Информация

Описание

The read_samples function in hcom.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted hcom file.

Важность: MEDIUM (5,5) Вектор: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2017-11358
Опубликовано: 31 июля 2017 г.
Изменено: 21 ноября 2024 г.
Идентификатор типа ошибки: CWE-125

Исправленные пакеты

Имя пакета
Ветка
Исправлено в версии
Версия в репозитории
Errata ID
№ Задания
Состояние
soxsisyphus14.4.2-alt714.4.2-alt8ALT-PU-2024-6289-3344866Исправлено
soxsisyphus_e2k14.4.2-alt714.4.2-alt7ALT-PU-2024-6551-1-Исправлено
soxsisyphus_riscv6414.4.2-alt714.4.2-alt8ALT-PU-2024-6403-1-Исправлено
soxsisyphus_loongarch6414.4.2-alt714.4.2-alt8ALT-PU-2024-6418-1-Исправлено
soxp1014.4.2-alt714.4.2-alt7ALT-PU-2024-6378-3344935Исправлено
soxp10_e2k14.4.2-alt714.4.2-alt7ALT-PU-2024-6891-1-Исправлено
soxc10f214.4.2-alt714.4.2-alt7ALT-PU-2024-6380-3344936Исправлено
soxc9f214.4.2-alt714.4.2-alt7ALT-PU-2024-6966-3345644Исправлено
soxp1114.4.2-alt714.4.2-alt7ALT-PU-2024-6289-3344866Исправлено

Ссылки на рекомендации, решения и инструменты

Ссылка
Ресурс
http://seclists.org/fulldisclosure/2017/Jul/81
  • Exploit
  • Mailing List
  • Third Party Advisory
http://seclists.org/fulldisclosure/2017/Jul/81
  • Exploit
  • Mailing List
  • Third Party Advisory
[oss-security] 20230203 sox: patches for old vulnerabilities
    [oss-security] 20230203 sox: patches for old vulnerabilities
      [oss-security] 20230204 Re: sox: patches for old vulnerabilities
        [oss-security] 20230204 Re: sox: patches for old vulnerabilities
          [oss-security] 20230205 Re: sox: patches for old vulnerabilities
            [oss-security] 20230205 Re: sox: patches for old vulnerabilities
              [oss-security] 20230206 Re: sox: patches for old vulnerabilities
                [oss-security] 20230206 Re: sox: patches for old vulnerabilities
                  [debian-lts-announce] 20171130 [SECURITY] [DLA 1197-1] sox security update
                  • Third Party Advisory
                  [debian-lts-announce] 20171130 [SECURITY] [DLA 1197-1] sox security update
                  • Third Party Advisory
                  [debian-lts-announce] 20190305 [SECURITY] [DLA 1705-1] sox security update
                  • Third Party Advisory
                  [debian-lts-announce] 20190305 [SECURITY] [DLA 1705-1] sox security update
                  • Third Party Advisory
                  GLSA-201810-02
                  • Third Party Advisory
                  GLSA-201810-02
                  • Third Party Advisory
                  42398
                  • Exploit
                  • Third Party Advisory
                  • VDB Entry
                  42398
                  • Exploit
                  • Third Party Advisory
                  • VDB Entry

                    1. Конфигурация 1

                      cpe:2.3:a:sound_exchange_project:sound_exchange:14.4.2:*:*:*:*:*:*:*

                      Конфигурация 2

                      cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
                      cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
                  VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
                  Версия: v25.2.1
                  Наверх