PT-2018-6720 · Sox+2 · Sound Exchange+2

Mans Rullgard

·

Publicado

2018-02-15

·

Atualizado

2024-06-15

·

CVE-2017-18189

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Sound eXchange (SoX) versions 14.4.2 and earlier
Description: The issue is related to a corrupt header that specifies zero channels, triggering an infinite loop and a resultant NULL pointer dereference in the startread function in xa.c. This may allow a remote attacker to cause a denial-of-service.
Recommendations: For versions 14.4.2 and earlier, update to a version that fixes the issue in the startread function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CESA-2019_2283
CVE-2017-18189
DLA-1197-1
DLA-1695-1
MGASA-2018-0211
OPENSUSE-SU-2018:0489-1
OPENSUSE-SU-2018:0493-1
OPENSUSE-SU-2024:11394-1
RHSA-2019:2283
RHSA-2019_2283

Produtos afetados

Centos
Red Hat
Sound Exchange