CVE-2017-11358

概要

参考情報

• seclists.org/fulldisclosure/2017/Jul/81 · Exploit
• openwall.com/lists/oss-security/2023/02/03/3
• openwall.com/lists/oss-security/2023/02/04/2
• openwall.com/lists/oss-security/2023/02/05/1
• openwall.com/lists/oss-security/2023/02/06/1
• lists.debian.org/debian-lts-announce/2017/11/msg00043.html · Third Party Advisory
• lists.debian.org/debian-lts-announce/2019/03/msg00007.html · Third Party Advisory
• security.gentoo.org/glsa/201810-02 · Third Party Advisory
• exploit-db.com/exploits/42398 · Exploit

sound exchange のその他の脆弱性

• CVE-2023-34432高 7.8A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16. This flaw can lead to a den…
• CVE-2023-34318高 7.8A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can lead to a denial of…
• CVE-2023-32627中 5.5A floating point exception vulnerability was found in sox, in the read_samples function at sox/src/voc.c:334:18. This flaw can lead to a den…
• CVE-2023-26590中 5.5A floating point exception vulnerability was found in sox, in the lsx_aiffstartwrite function at sox/src/aiff.c:622:58. This flaw can lead t…
• CVE-2021-33844中 5.5A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file. An attacker with a crafted wav…