CVE-2023-34432
CVE-2023-34432 · Heap-buffer-overflow in src/formats_i.c
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16. This flaw can lead to a denial of service, code execution, or information disclosure.
CVSS 7.8 · High · EPSS 0.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
sox
No fix published
red hat enterprise linux 6
No fix published
red hat enterprise linux 7
No fix published
fedora
No fix published
extra packages for enterprise linux
No fix published
sox Debian:12
- Affected ranges
- ECOSYSTEM: < 14.4.2+git20190427-3.2
Update to 14.4.2+git20190427-3.2
sox Debian:13
- Affected ranges
- ECOSYSTEM: < 14.4.2+git20190427-3.2
Update to 14.4.2+git20190427-3.2