Red Hat Security AdvisoryRHSA-2019:2283
sox security update
Released 2019-08-06 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) sox-14.4.1-7.el7
- Red Hat Enterprise Linux Client Optional (v. 7) sox-devel-14.4.1-7.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) sox-14.4.1-7.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) sox-devel-14.4.1-7.el7
- Red Hat Enterprise Linux Server (v. 7) sox-14.4.1-7.el7, sox-14.4.1-7.el7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) sox-devel-14.4.1-7.el7, sox-devel-14.4.1-7.el7.ppc
- Red Hat Enterprise Linux Workstation (v. 7) sox-14.4.1-7.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) sox-devel-14.4.1-7.el7
Fixes 1 record
Priority MEDIUM 41
In the startread function in xa.c in Sound eXchange (SoX) through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker t…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.05055 · Published 2018-02-15 · Partial fix CWE-476
