CVE-2017-15370 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Exchange Project Sound Exchange
Severity
5.5MEDIUMNVD
EPSS
0.3%
top 42.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 16
Latest updateMay 13
Description
There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages1 packages
Also affects: Debian Linux 7.0, 8.0
🔴Vulnerability Details
3GHSAâ–¶
GHSA-mhq7-f3rw-g8h6: There is a heap-based buffer overflow in the ImaExpandS function of ima_rw↗2022-05-13
OSVâ–¶
CVE-2017-15370: There is a heap-based buffer overflow in the ImaExpandS function of ima_rw↗2017-10-16
CVEListâ–¶
CVE-2017-15370: There is a heap-based buffer overflow in the ImaExpandS function of ima_rw↗2017-10-16
📋Vendor Advisories
3Microsoftâ–¶
There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.↗2017-10-10
Debianâ–¶
CVE-2017-15370: sox - There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in ...↗2017