CVE-2014-8145
Published: 31 December 2014
Multiple heap-based buffer overflows in Sound eXchange (SoX) 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the (1) start_read or (2) AdpcmReadBlock function.
From the Ubuntu Security Team
It was discovered that SoX incorrectly handled certain media files. An attacker could possibly use this issue to cause a denial of service or other unspecified impact.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
sox Launchpad, Ubuntu, Debian |
artful |
Not vulnerable
(14.4.1-5)
|
| bionic |
Not vulnerable
(14.4.1-5)
|
|
| cosmic |
Not vulnerable
(14.4.1-5)
|
|
| lucid |
Ignored
(end of life)
|
|
| precise |
Ignored
(end of life)
|
|
| trusty |
Released
(14.4.1-3ubuntu1.1)
|
|
| upstream |
Released
(14.4.1-5)
|
|
| utopic |
Ignored
(end of life)
|
|
| vivid |
Not vulnerable
(14.4.1-5)
|
|
| wily |
Not vulnerable
(14.4.1-5)
|
|
| xenial |
Released
(14.4.1-5ubuntu0.1)
|
|
| yakkety |
Not vulnerable
(14.4.1-5)
|
|
| zesty |
Not vulnerable
(14.4.1-5)
|
|
|
Patches: vendor: https://www.debian.org/security/2014/dsa-3112 |
||