Vulnerability CVE-2021-23159: Information
Description
A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsx_read_w_buf() in formats_i.c file. The vulnerability is exploitable with a crafted file, that could cause an application to crash.
Severity: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Fixed packages
Package name | Branch | Fixed in version | Version from repository | Errata ID | Task # | State |
|---|---|---|---|---|---|---|
| sox | sisyphus | 14.4.2-alt7 | 14.4.2-alt7 | ALT-PU-2024-6289-3 | 344866 | Fixed |
| sox | sisyphus_e2k | 14.4.2-alt7 | 14.4.2-alt7 | ALT-PU-2024-6551-1 | - | Fixed |
| sox | sisyphus_riscv64 | 14.4.2-alt7 | 14.4.2-alt7 | ALT-PU-2024-6403-1 | - | Fixed |
| sox | sisyphus_loongarch64 | 14.4.2-alt7 | 14.4.2-alt7 | ALT-PU-2024-6418-1 | - | Fixed |
| sox | p10 | 14.4.2-alt7 | 14.4.2-alt7 | ALT-PU-2024-6378-3 | 344935 | Fixed |
| sox | p10_e2k | 14.4.2-alt7 | 14.4.2-alt7 | ALT-PU-2024-6891-1 | - | Fixed |
| sox | c10f1 | 14.4.2-alt7 | 14.4.2-alt7 | ALT-PU-2024-6855-3 | 345456 | Fixed |
| sox | c9f2 | 14.4.2-alt7 | 14.4.2-alt7 | ALT-PU-2024-6966-3 | 345644 | Fixed |
References to Advisories, Solutions, and Tools
Hyperlink | Resource |
|---|---|
| https://access.redhat.com/security/cve/CVE-2021-23159 |
|
| https://sourceforge.net/p/sox/bugs/352/ |
|
| https://security.archlinux.org/CVE-2021-23159 |
|
| https://bugzilla.redhat.com/show_bug.cgi?id=1975671 |
|