CVE-2014-8145
HIGH severity · CVSS 7.5 · Memory corruption
7.5CVSS HIGH
Summary
Multiple heap-based buffer overflows in Sound eXchange (SoX) 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the (1) start_read or (2) AdpcmReadBlock function.
Impact & exploitability
Attack vectorNetwork
Attack complexityLow
Privileges required—
User interaction—
Confidentiality impact—
Integrity impact—
Availability impact—
Exploit probability (EPSS)8%
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected products we track (1)
Recommendation
Apply the vendor fix promptly. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://advisories.mageia.org/MGASA-2014-0561.htmlAdvisory
- http://www.debian.org/security/2014/dsa-3112Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:015
- http://www.ocert.org/advisories/ocert-2014-010.htmlAdvisory
- http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.htmlAdvisory
- http://www.securityfocus.com/bid/71774Advisory
- https://lists.debian.org/debian-lts-announce/2019/02/msg00034.htmlAdvisory
- http://packetstormsecurity.com/files/129699/SoX-14.4.1-Heap-Buffer-Overflow.htmlAdvisory