PT-2023-5096 · Sox+5 · Sox+5

Dhananjay Arunesh · Publicado 2023-07-10 · Atualizado 2024-06-15 · CVE-2023-32627

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions sox (affected versions not specified)

Description A floating point exception vulnerability was found in the read samples function at sox/src/voc.c:334:18. This flaw can lead to a denial of service. The issue is related to incorrect numerical calculations when processing floating point values.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Enumeração de Fraquezas

CWE-1077

CWE-697

Identificadores relacionados

ALT-PU-2024-6289

ALT-PU-2024-6378

ALT-PU-2024-6855

ALT-PU-2024-6966

AZL-43483

AZL-44616

BDU:2023-05656

CVE-2023-32627

DLA-3527-1

OESA-2023-1931

OPENSUSE-SU-2023:0328-1

OPENSUSE-SU-2023:0329-1

OPENSUSE-SU-2024:13359-1

USN-6345-1

Produtos afetados

Alt Linux

Astra Linux

Debian

Linuxmint

Ubuntu

Sox

Referências · 52

• https://nvd.nist.gov/vuln/detail/CVE-2023-32627 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-32627 · Aviso do Fabricante
• https://bugzilla.suse.com/1212062 · Nota
• https://suse.com/security/cve/CVE-2021-40426 · Nota
• https://suse.com/security/cve/CVE-2019-13590 · Nota
• https://lists.opensuse.org/archives/list/[e-mail]/thread/OWH3Y6RJSLCAZ7XAIEM2FMD5E6EQYZM5 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2021-23159 · Nota de Segurança
• https://suse.com/security/cve/CVE-2021-3643 · Nota
• https://t.me/cvenotify/56375 · Publicação no Telegram
• https://bugzilla.suse.com/1212061 · Nota
• https://sourceforge.net/p/sox/bugs/_discuss/thread/e759e37389/2ead/attachment/0026-CVE-2023-32627-Filter-null-sampling-rate-in-VOC-code.patch · Nota
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2021-23159 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-32627 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2023-32627 · Aviso do Fabricante