CVE-2014-8145
Fixed in a distro release EPSS 8%
Multiple heap-based buffer overflows in Sound eXchange (SoX) 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the (1) start_read or (2) AdpcmReadBlock function.
Products: sound_exchange_project sound_exchange, debian_linux, oracle solaris
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | sox | 14.4.2-2 |
| Debian 13 | sox | 14.4.2-2 |
| Debian 6.0 | sox | 14.3.1-1+deb6u1 |
| Debian 7 | sox | 14.4.0-3+deb7u1 |
| Debian 8 | sox | 14.4.1-5+deb8u1 |
| Ubuntu 14.04 LTS | sox | 14.4.1-3ubuntu1.1 |
| Ubuntu 16.04 LTS | sox | 14.4.1-5ubuntu0.1 |