A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash.
{ "binaries": [ { "binary_name": "libsox-dev", "binary_version": "14.4.1-3ubuntu1.1+esm2" }, { "binary_name": "libsox-fmt-all", "binary_version": "14.4.1-3ubuntu1.1+esm2" }, { "binary_name": "libsox-fmt-alsa", "binary_version": "14.4.1-3ubuntu1.1+esm2" }, { "binary_name": "libsox-fmt-alsa-dbgsym", "binary_version": "14.4.1-3ubuntu1.1+esm2" }, { "binary_name": "libsox-fmt-ao", "binary_version": "14.4.1-3ubuntu1.1+esm2" }, { "binary_name": "libsox-fmt-ao-dbgsym", "binary_version": "14.4.1-3ubuntu1.1+esm2" }, { "binary_name": "libsox-fmt-base", "binary_version": "14.4.1-3ubuntu1.1+esm2" }, { "binary_name": "libsox-fmt-base-dbgsym", "binary_version": "14.4.1-3ubuntu1.1+esm2" }, { "binary_name": "libsox-fmt-mp3", "binary_version": "14.4.1-3ubuntu1.1+esm2" }, { "binary_name": "libsox-fmt-mp3-dbgsym", "binary_version": "14.4.1-3ubuntu1.1+esm2" }, { "binary_name": "libsox-fmt-oss", "binary_version": "14.4.1-3ubuntu1.1+esm2" }, { "binary_name": "libsox-fmt-oss-dbgsym", "binary_version": "14.4.1-3ubuntu1.1+esm2" }, { "binary_name": "libsox-fmt-pulse", "binary_version": "14.4.1-3ubuntu1.1+esm2" }, { "binary_name": "libsox-fmt-pulse-dbgsym", "binary_version": "14.4.1-3ubuntu1.1+esm2" }, { "binary_name": "libsox2", "binary_version": "14.4.1-3ubuntu1.1+esm2" }, { "binary_name": "libsox2-dbgsym", "binary_version": "14.4.1-3ubuntu1.1+esm2" }, { "binary_name": "sox", "binary_version": "14.4.1-3ubuntu1.1+esm2" }, { "binary_name": "sox-dbgsym", "binary_version": "14.4.1-3ubuntu1.1+esm2" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "libsox-dev", "binary_version": "14.4.1-5+deb8u4ubuntu0.1+esm1" }, { "binary_name": "libsox-fmt-all", "binary_version": "14.4.1-5+deb8u4ubuntu0.1+esm1" }, { "binary_name": "libsox-fmt-alsa", "binary_version": "14.4.1-5+deb8u4ubuntu0.1+esm1" }, { "binary_name": "libsox-fmt-alsa-dbgsym", "binary_version": "14.4.1-5+deb8u4ubuntu0.1+esm1" }, { "binary_name": "libsox-fmt-ao", "binary_version": "14.4.1-5+deb8u4ubuntu0.1+esm1" }, { "binary_name": "libsox-fmt-ao-dbgsym", "binary_version": "14.4.1-5+deb8u4ubuntu0.1+esm1" }, { "binary_name": "libsox-fmt-base", "binary_version": "14.4.1-5+deb8u4ubuntu0.1+esm1" }, { "binary_name": "libsox-fmt-base-dbgsym", "binary_version": "14.4.1-5+deb8u4ubuntu0.1+esm1" }, { "binary_name": "libsox-fmt-mp3", "binary_version": "14.4.1-5+deb8u4ubuntu0.1+esm1" }, { "binary_name": "libsox-fmt-mp3-dbgsym", "binary_version": "14.4.1-5+deb8u4ubuntu0.1+esm1" }, { "binary_name": "libsox-fmt-oss", "binary_version": "14.4.1-5+deb8u4ubuntu0.1+esm1" }, { "binary_name": "libsox-fmt-oss-dbgsym", "binary_version": "14.4.1-5+deb8u4ubuntu0.1+esm1" }, { "binary_name": "libsox-fmt-pulse", "binary_version": "14.4.1-5+deb8u4ubuntu0.1+esm1" }, { "binary_name": "libsox-fmt-pulse-dbgsym", "binary_version": "14.4.1-5+deb8u4ubuntu0.1+esm1" }, { "binary_name": "libsox2", "binary_version": "14.4.1-5+deb8u4ubuntu0.1+esm1" }, { "binary_name": "libsox2-dbgsym", "binary_version": "14.4.1-5+deb8u4ubuntu0.1+esm1" }, { "binary_name": "sox", "binary_version": "14.4.1-5+deb8u4ubuntu0.1+esm1" }, { "binary_name": "sox-dbgsym", "binary_version": "14.4.1-5+deb8u4ubuntu0.1+esm1" } ], "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "libsox-dev", "binary_version": "14.4.2-3ubuntu0.18.04.2" }, { "binary_name": "libsox-fmt-all", "binary_version": "14.4.2-3ubuntu0.18.04.2" }, { "binary_name": "libsox-fmt-alsa", "binary_version": "14.4.2-3ubuntu0.18.04.2" }, { "binary_name": "libsox-fmt-alsa-dbgsym", "binary_version": "14.4.2-3ubuntu0.18.04.2" }, { "binary_name": "libsox-fmt-ao", "binary_version": "14.4.2-3ubuntu0.18.04.2" }, { "binary_name": "libsox-fmt-ao-dbgsym", "binary_version": "14.4.2-3ubuntu0.18.04.2" }, { "binary_name": "libsox-fmt-base", "binary_version": "14.4.2-3ubuntu0.18.04.2" }, { "binary_name": "libsox-fmt-base-dbgsym", "binary_version": "14.4.2-3ubuntu0.18.04.2" }, { "binary_name": "libsox-fmt-mp3", "binary_version": "14.4.2-3ubuntu0.18.04.2" }, { "binary_name": "libsox-fmt-mp3-dbgsym", "binary_version": "14.4.2-3ubuntu0.18.04.2" }, { "binary_name": "libsox-fmt-oss", "binary_version": "14.4.2-3ubuntu0.18.04.2" }, { "binary_name": "libsox-fmt-oss-dbgsym", "binary_version": "14.4.2-3ubuntu0.18.04.2" }, { "binary_name": "libsox-fmt-pulse", "binary_version": "14.4.2-3ubuntu0.18.04.2" }, { "binary_name": "libsox-fmt-pulse-dbgsym", "binary_version": "14.4.2-3ubuntu0.18.04.2" }, { "binary_name": "libsox3", "binary_version": "14.4.2-3ubuntu0.18.04.2" }, { "binary_name": "libsox3-dbgsym", "binary_version": "14.4.2-3ubuntu0.18.04.2" }, { "binary_name": "sox", "binary_version": "14.4.2-3ubuntu0.18.04.2" }, { "binary_name": "sox-dbgsym", "binary_version": "14.4.2-3ubuntu0.18.04.2" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "libsox-dev", "binary_version": "14.4.2+git20190427-2+deb11u1build0.20.04.1" }, { "binary_name": "libsox-fmt-all", "binary_version": "14.4.2+git20190427-2+deb11u1build0.20.04.1" }, { "binary_name": "libsox-fmt-alsa", "binary_version": "14.4.2+git20190427-2+deb11u1build0.20.04.1" }, { "binary_name": "libsox-fmt-alsa-dbgsym", "binary_version": "14.4.2+git20190427-2+deb11u1build0.20.04.1" }, { "binary_name": "libsox-fmt-ao", "binary_version": "14.4.2+git20190427-2+deb11u1build0.20.04.1" }, { "binary_name": "libsox-fmt-ao-dbgsym", "binary_version": "14.4.2+git20190427-2+deb11u1build0.20.04.1" }, { "binary_name": "libsox-fmt-base", "binary_version": "14.4.2+git20190427-2+deb11u1build0.20.04.1" }, { "binary_name": "libsox-fmt-base-dbgsym", "binary_version": "14.4.2+git20190427-2+deb11u1build0.20.04.1" }, { "binary_name": "libsox-fmt-mp3", "binary_version": "14.4.2+git20190427-2+deb11u1build0.20.04.1" }, { "binary_name": "libsox-fmt-mp3-dbgsym", "binary_version": "14.4.2+git20190427-2+deb11u1build0.20.04.1" }, { "binary_name": "libsox-fmt-oss", "binary_version": "14.4.2+git20190427-2+deb11u1build0.20.04.1" }, { "binary_name": "libsox-fmt-oss-dbgsym", "binary_version": "14.4.2+git20190427-2+deb11u1build0.20.04.1" }, { "binary_name": "libsox-fmt-pulse", "binary_version": "14.4.2+git20190427-2+deb11u1build0.20.04.1" }, { "binary_name": "libsox-fmt-pulse-dbgsym", "binary_version": "14.4.2+git20190427-2+deb11u1build0.20.04.1" }, { "binary_name": "libsox3", "binary_version": "14.4.2+git20190427-2+deb11u1build0.20.04.1" }, { "binary_name": "libsox3-dbgsym", "binary_version": "14.4.2+git20190427-2+deb11u1build0.20.04.1" }, { "binary_name": "sox", "binary_version": "14.4.2+git20190427-2+deb11u1build0.20.04.1" }, { "binary_name": "sox-dbgsym", "binary_version": "14.4.2+git20190427-2+deb11u1build0.20.04.1" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "libsox-dev", "binary_version": "14.4.2+git20190427-2+deb11u1build0.22.04.1" }, { "binary_name": "libsox-fmt-all", "binary_version": "14.4.2+git20190427-2+deb11u1build0.22.04.1" }, { "binary_name": "libsox-fmt-alsa", "binary_version": "14.4.2+git20190427-2+deb11u1build0.22.04.1" }, { "binary_name": "libsox-fmt-alsa-dbgsym", "binary_version": "14.4.2+git20190427-2+deb11u1build0.22.04.1" }, { "binary_name": "libsox-fmt-ao", "binary_version": "14.4.2+git20190427-2+deb11u1build0.22.04.1" }, { "binary_name": "libsox-fmt-ao-dbgsym", "binary_version": "14.4.2+git20190427-2+deb11u1build0.22.04.1" }, { "binary_name": "libsox-fmt-base", "binary_version": "14.4.2+git20190427-2+deb11u1build0.22.04.1" }, { "binary_name": "libsox-fmt-base-dbgsym", "binary_version": "14.4.2+git20190427-2+deb11u1build0.22.04.1" }, { "binary_name": "libsox-fmt-mp3", "binary_version": "14.4.2+git20190427-2+deb11u1build0.22.04.1" }, { "binary_name": "libsox-fmt-mp3-dbgsym", "binary_version": "14.4.2+git20190427-2+deb11u1build0.22.04.1" }, { "binary_name": "libsox-fmt-oss", "binary_version": "14.4.2+git20190427-2+deb11u1build0.22.04.1" }, { "binary_name": "libsox-fmt-oss-dbgsym", "binary_version": "14.4.2+git20190427-2+deb11u1build0.22.04.1" }, { "binary_name": "libsox-fmt-pulse", "binary_version": "14.4.2+git20190427-2+deb11u1build0.22.04.1" }, { "binary_name": "libsox-fmt-pulse-dbgsym", "binary_version": "14.4.2+git20190427-2+deb11u1build0.22.04.1" }, { "binary_name": "libsox3", "binary_version": "14.4.2+git20190427-2+deb11u1build0.22.04.1" }, { "binary_name": "libsox3-dbgsym", "binary_version": "14.4.2+git20190427-2+deb11u1build0.22.04.1" }, { "binary_name": "sox", "binary_version": "14.4.2+git20190427-2+deb11u1build0.22.04.1" }, { "binary_name": "sox-dbgsym", "binary_version": "14.4.2+git20190427-2+deb11u1build0.22.04.1" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }