---

CVE-2017-18189 - log back

CVE-2017-18189 created at 25 Sep 2019 19:31:40
Severity	+ Low
Remote	+ Local
Type	+ Denial of service
Description	+ In the startread function in xa.c in Sound eXchange (SoX) through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service.
References	+ https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=881121 + https://public-inbox.org/sox-devel/20171109114554.16297-1-mans@mansr.com/raw
Notes