CVE-2017-15370

There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2

published October 16, 2017

CVSS
—
EPSS
2%
Percentile
77.2
In the wild
Unconfirmed
What it is

There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01717 · 77.2th percentile
Published
2017-10-16T04:00Z
EPSS history
Timeline
  • 16 OCT 04:00Z
    There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2
    cvelistv5