PT-2023-5096 · Sox+5 · Sox+5

Dhananjay Arunesh · Published 2023-07-10 · Updated 2024-06-15 · CVE-2023-32627

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions sox (affected versions not specified)

Description A floating point exception vulnerability was found in the read samples function at sox/src/voc.c:334:18. This flaw can lead to a denial of service. The issue is related to incorrect numerical calculations when processing floating point values.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-1077

CWE-697

Related Identifiers

ALT-PU-2024-6289

ALT-PU-2024-6378

ALT-PU-2024-6855

ALT-PU-2024-6966

AZL-43483

AZL-44616

BDU:2023-05656

CVE-2023-32627

DLA-3527-1

OESA-2023-1931

OPENSUSE-SU-2023:0328-1

OPENSUSE-SU-2023:0329-1

OPENSUSE-SU-2024:13359-1

USN-6345-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Ubuntu

Sox

References · 52

• https://nvd.nist.gov/vuln/detail/CVE-2023-32627 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-32627 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-23159 · Security Note
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-32627 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-32627 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-26590 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:13359-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2023:0329-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-05656 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-23210 · Security Note
• https://osv.dev/vulnerability/USN-6345-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-44616 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-23172 · Security Note
• https://osv.dev/vulnerability/AZL-43483 · Vendor Advisory