CVE-2017-18189 log
| Source |
|
| Severity | Low |
| Remote | No |
| Type | Denial of service |
| Description | In the startread function in xa.c in Sound eXchange (SoX) through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-610 | sox | 14.4.2-1 | 14.4.2-3 | Low | Fixed | FS#57485 |
| References |
|---|
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=881121 https://public-inbox.org/sox-devel/20171109114554.16297-1-mans@mansr.com/raw |