CVE-2017-15372 PUBLISHED

There is a stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function of adpcm.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.

EPSS 0.62% · 69.7th percentile

Risk Scores

EPSS Score
0.62%
69.7th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSsox0, 14.4.1-5
Ubuntu:14.04:LTSsox0, 14.4.1-3, 14.4.1-3ubuntu1

Timeline

References

Open in Interactive Console →