CVE-2021-23172

Name

CVE-2021-23172

Description

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash.

NVD Severity

unknown

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

Type	URI
MISC	https://bugzilla.redhat.com/show_bug.cgi?id=1975666
MISC	https://sourceforge.net/p/sox/bugs/350/
MISC	https://access.redhat.com/security/cve/CVE-2021-23172
MISC	https://security.archlinux.org/CVE-2021-23172

CPE URI	Source package	Min version	Max version
`cpe:2.3:a:sox_project:sox:14.4.2-7:::::::*`	sox	== None	== 14.4.2-7
`cpe:2.3:a:sound_exchange_project:sound_exchange:14.4.2-7:::::::*`	sound_exchange	== None	== 14.4.2-7

References

Match rules

Vulnerable and fixed packages