The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - sox: two heap out-of-bounds access issues (oCERT-2014-010) (CVE-2014-8145)

  - sox: null pointer dereference in function lsx_make_lpf in effect_i_dsp.c (CVE-2019-8357)

  - The startread function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial     of service (divide-by-zero error and application crash) via a crafted wav file. (CVE-2017-11332)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the versions of the sox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in libsox.a in SoX 14.4.2. In     sox-fmt.h (startread function), there is an integer     overflow on the result of integer addition (wraparound     to 0) fed into the lsx_calloc macro that wraps malloc.
    When a NULL pointer is returned, it is used without a     prior check that it is a valid pointer, leading to a     NULL pointer dereference on lsx_readbuf in     formats_i.c.(CVE-2019-13590)

  - An issue was discovered in SoX 14.4.2. In xmalloc.h,     there is an integer overflow on the result of     multiplication fed into the lsx_valloc macro that wraps     malloc. When the buffer is allocated, it is smaller     than expected, leading to a heap-based buffer overflow     in channels_start in remix.c.(CVE-2019-8355)

  - An issue was discovered in SoX 14.4.2. lsx_make_lpf in     effect_i_dsp.c allows a NULL pointer     dereference.(CVE-2019-8357)

  - An issue was discovered in SoX 14.4.2. One of the     arguments to bitrv2 in fft4g.c is not guarded, such     that it can lead to write access outside of the     statically declared array, aka a stack-based buffer     overflow.(CVE-2019-8356)

  - In lsx_aiffstartread in aiff.c in Sound eXchange (SoX)     14.4.2, there is a Use-After-Free vulnerability     triggered by supplying a malformed AIFF     file.(CVE-2017-15642)

  - The read_samples function in hcom.c in Sound eXchange     (SoX) 14.4.2 allows remote attackers to cause a denial     of service (invalid memory read and application crash)     via a crafted hcom file.(CVE-2017-11358)

  - The startread function in wav.c in Sound eXchange (SoX)     14.4.2 allows remote attackers to cause a denial of     service (divide-by-zero error and application crash)     via a crafted wav file.(CVE-2017-11332)

  - The wavwritehdr function in wav.c in Sound eXchange     (SoX) 14.4.2 allows remote attackers to cause a denial     of service (divide-by-zero error and application crash)     via a crafted snd file, during conversion to a wav     file.(CVE-2017-11359)

  - There is a heap-based buffer overflow in the ImaExpandS     function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A     Crafted input will lead to a denial of service attack     during conversion of an audio file.(CVE-2017-15370)

  - There is a reachable assertion abort in the function     sox_append_comment() in formats.c in Sound eXchange     (SoX) 14.4.2. A Crafted input will lead to a denial of     service attack during conversion of an audio     file.(CVE-2017-15371)

  - There is a stack-based buffer overflow in the     lsx_ms_adpcm_block_expand_i function of adpcm.c in     Sound eXchange (SoX) 14.4.2. A Crafted input will lead     to a denial of service attack during conversion of an     audio file.(CVE-2017-15372)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several issues were found in SoX, the Swiss army knife of sound processing programs, that could lead to denial of service via application crash or potentially to arbitrary code execution by processing maliciously crafted input files.

For Debian 8 'Jessie', these problems have been fixed in version 14.4.1-5+deb8u4.

We recommend that you upgrade your sox packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

サウンド処理プログラムのスイスアーミーツールであるSoXに、いくつかの問題が発見されました。このため、アプリケーションのクラッシュによるサービス拒否、または悪意を持って細工された入力ファイルを処理することで、任意コードの実行が発生する可能性があります。

Debian 8「Jessie」では、これらの問題はバージョン14.4.1-5+deb8u4で修正されました。

お使いのsoxパッケージをアップグレードすることを推奨します。

注: Tenable Network Securityは、前述の記述ブロックをDLAセキュリティアドバイザリから直接抽出しています。Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

在　Swiss army knife of sound processing programs　SoX　中發現數個問題，可導致應用程式損毀進而導致拒絕服務，或者透過處理惡意特製的輸入文件而導致任意程式碼執行。針對 Debian 8「Jessie」，這些問題已在 14.4.1-5~deb8u4 版本中修正。建議您升級 sox 套件。注意：Tenable Network Security 已直接從 DLA 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

声音处理程序中的瑞士军刀 SoX 中发现多个问题，可能会通过应用程序崩溃造成拒绝服务，或可能会通过处理恶意构建的输入文件造成任意代码执行。对于 Debian 8“Jessie”，这些问题已在 14.4:1-5+deb8u4 版本中修复。建议您升级 sox 程序包。注意：Tenable Network Security 已直接从 DLA 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下，尽可能进行自动整理和排版。

SoXが特定のMP3ファイルを不適切に処理することがわかりました。攻撃者がこの問題を悪用して、サービス拒否を引き起こす可能性があります。
(CVE-2019-8354、CVE-2019-8355、CVE-2019-8356、CVE-2019-8357)。

注意: Tenable Network Security は、前述の説明ブロックを Ubuntu セキュリティアドバイザリからすでに直接抽出しています。Tenable では、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

USN-4079-1 は、SoX の脆弱性を修正しました。この更新プログラムは、Ubuntu 18.04 LTSとUbuntu 19.04に対応する更新プログラムを提供します。

元のアドバイザリの詳細：

SoXが特定のMP3ファイルを不適切に処理することがわかりました。攻撃者がこの問題を悪用して、サービス拒否を引き起こす可能性があります。
(CVE-2019-8354、CVE-2019-8355、CVE-2019-8356、CVE-2019-8357)。

注意: Tenable Network Security は、前述の説明ブロックを Ubuntu セキュリティアドバイザリからすでに直接抽出しています。Tenable では、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

據發現，SoX 未正確處理某些 MP3 檔案。攻擊者可能利用此問題造成拒絕服務。
(CVE-2019-8354、CVE-2019-8355、CVE-2019-8356、CVE-2019-8357)。

請注意，Tenable Network Security 已直接從 Ubuntu 安全性公告擷取前述描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

USN-4079-1 已修復 SoX 中的弱點。此更新提供 Ubuntu 18.04 LTS 和 Ubuntu 19.04 的對應更新。

原始公告詳細資料：

據發現，SoX 未正確處理某些 MP3 檔案。攻擊者可能利用此問題造成拒絕服務。
(CVE-2019-8354、CVE-2019-8355、CVE-2019-8356、CVE-2019-8357)。

請注意，Tenable Network Security 已直接從 Ubuntu 安全性公告擷取前述描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

发现 SoX 未能正确处理某些 MP3 文件。攻击者可能利用此问题造成拒绝服务。
（CVE-2019-8354、CVE-2019-8355、CVE-2019-8356、CVE-2019-8357）

请注意，Tenable Network Security 已直接从 Ubuntu 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下，尽可能进行自动清理和排版。

USN-4079-1 修复了 SoX 中的漏洞。此更新提供针对 Ubuntu 18.04 LTS 和 Ubuntu 19.04 的相应更新。

原始公告详细信息：

发现 SoX 未能正确处理某些 MP3 文件。攻击者可能利用此问题造成拒绝服务。
（CVE-2019-8354、CVE-2019-8355、CVE-2019-8356、CVE-2019-8357）

请注意，Tenable Network Security 已直接从 Ubuntu 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下，尽可能进行自动清理和排版。

It was discovered that SoX incorrectly handled certain MP3 files. An attacker could possibly use this issue to cause a denial of service.
(CVE-2019-8354, CVE-2019-8355, CVE-2019-8356, CVE-2019-8357).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

USN-4079-1 fixed vulnerabilities in SoX. This update provides the corresponding update for Ubuntu 18.04 LTS and Ubuntu 19.04.

Original advisory details :

It was discovered that SoX incorrectly handled certain MP3 files. An attacker could possibly use this issue to cause a denial of service.
(CVE-2019-8354, CVE-2019-8355, CVE-2019-8356, CVE-2019-8357).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the sox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in SoX 14.4.2. In xmalloc.h,     there is an integer overflow on the result of     multiplication fed into the lsx_valloc macro that wraps     malloc. When the buffer is allocated, it is smaller     than expected, leading to a heap-based buffer overflow     in channels_start in remix.c.(CVE-2019-8355)

  - An issue was discovered in SoX 14.4.2. One of the     arguments to bitrv2 in fft4g.c is not guarded, such     that it can lead to write access outside of the     statically declared array, aka a stack-based buffer     overflow.(CVE-2019-8356)

  - An issue was discovered in SoX 14.4.2. lsx_make_lpf in     effect_i_dsp.c allows a NULL pointer     dereference.(CVE-2019-8357)

  - An issue was discovered in libsox.a in SoX 14.4.2. In     sox-fmt.h (startread function), there is an integer     overflow on the result of integer addition (wraparound     to 0) fed into the lsx_calloc macro that wraps malloc.
    When a NULL pointer is returned, it is used without a     prior check that it is a valid pointer, leading to a     NULL pointer dereference on lsx_readbuf in     formats_i.c.(CVE-2019-13590)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the sox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in SoX 14.4.2. In xmalloc.h,     there is an integer overflow on the result of     multiplication fed into the lsx_valloc macro that wraps     malloc. When the buffer is allocated, it is smaller     than expected, leading to a heap-based buffer overflow     in channels_start in remix.c.(CVE-2019-8355)

  - An issue was discovered in SoX 14.4.2. One of the     arguments to bitrv2 in fft4g.c is not guarded, such     that it can lead to write access outside of the     statically declared array, aka a stack-based buffer     overflow.(CVE-2019-8356)

  - An issue was discovered in SoX 14.4.2. lsx_make_lpf in     effect_i_dsp.c allows a NULL pointer     dereference.(CVE-2019-8357)

  - An issue was discovered in libsox.a in SoX 14.4.2. In     sox-fmt.h (startread function), there is an integer     overflow on the result of integer addition (wraparound     to 0) fed into the lsx_calloc macro that wraps malloc.
    When a NULL pointer is returned, it is used without a     prior check that it is a valid pointer, leading to a     NULL pointer dereference on lsx_readbuf in     formats_i.c.(CVE-2019-13590)

  - The startread function in wav.c in Sound eXchange (SoX)     14.4.2 allows remote attackers to cause a denial of     service (divide-by-zero error and application crash)     via a crafted wav file.(CVE-2017-11332)

  - The read_samples function in hcom.c in Sound eXchange     (SoX) 14.4.2 allows remote attackers to cause a denial     of service (invalid memory read and application crash)     via a crafted hcom file.(CVE-2017-11358)

  - The wavwritehdr function in wav.c in Sound eXchange     (SoX) 14.4.2 allows remote attackers to cause a denial     of service (divide-by-zero error and application crash)     via a crafted snd file, during conversion to a wav     file.(CVE-2017-11359)

  - There is a heap-based buffer overflow in the ImaExpandS     function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A     Crafted input will lead to a denial of service attack     during conversion of an audio file.(CVE-2017-15370)

  - There is a reachable assertion abort in the function     sox_append_comment() in formats.c in Sound eXchange     (SoX) 14.4.2. A Crafted input will lead to a denial of     service attack during conversion of an audio     file.(CVE-2017-15371)

  - There is a stack-based buffer overflow in the     lsx_ms_adpcm_block_expand_i function of adpcm.c in     Sound eXchange (SoX) 14.4.2. A Crafted input will lead     to a denial of service attack during conversion of an     audio file.(CVE-2017-15372)

  - In lsx_aiffstartread in aiff.c in Sound eXchange (SoX)     14.4.2, there is a Use-After-Free vulnerability     triggered by supplying a malformed AIFF     file.(CVE-2017-15642)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
199662	RHEL 7 : sox (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	medium
149127	EulerOS 2.0 SP3 : sox (EulerOS-SA-2021-1850)	Nessus	Huawei Local Security Checks	2021/4/30	2024/1/3	medium
125479	Debian DLA-1808-1 : sox security update	Nessus	Debian Local Security Checks	2019/5/29	2024/5/20	medium
125479	DebianDLA-1808-1: soxのセキュリティ更新プログラム	Nessus	Debian Local Security Checks	2019/5/29	2024/5/20	medium
125479	Debian DLA-1808-1：sox 安全性更新	Nessus	Debian Local Security Checks	2019/5/29	2024/5/20	medium
125479	Debian DLA-1808-1：sox 安全更新	Nessus	Debian Local Security Checks	2019/5/29	2024/5/20	medium
127795	Ubuntu 16.04 LTS : SoXの脆弱性 (USN-4079-1)	Nessus	Ubuntu Local Security Checks	2019/8/12	2023/10/20	medium
127796	Ubuntu 18.04 LTS : SoX の脆弱性 (USN-4079-2)	Nessus	Ubuntu Local Security Checks	2019/8/12	2023/10/20	medium
127795	Ubuntu 16.04 LTS：SoX 弱點 (USN-4079-1)	Nessus	Ubuntu Local Security Checks	2019/8/12	2023/10/20	medium
127796	Ubuntu 18.04 LTS：SoX 弱點 (USN-4079-2)	Nessus	Ubuntu Local Security Checks	2019/8/12	2023/10/20	medium
127795	Ubuntu 16.04 LTS：SoX 漏洞 (USN-4079-1)	Nessus	Ubuntu Local Security Checks	2019/8/12	2023/10/20	medium
127796	Ubuntu 18.04 LTS：SoX 漏洞 (USN-4079-2)	Nessus	Ubuntu Local Security Checks	2019/8/12	2023/10/20	medium
127795	Ubuntu 16.04 LTS : SoX vulnerabilities (USN-4079-1)	Nessus	Ubuntu Local Security Checks	2019/8/12	2023/10/20	medium
127796	Ubuntu 18.04 LTS : SoX vulnerabilities (USN-4079-2)	Nessus	Ubuntu Local Security Checks	2019/8/12	2023/10/20	medium
144236	EulerOS 2.0 SP5 : sox (EulerOS-SA-2020-2565)	Nessus	Huawei Local Security Checks	2020/12/15	2024/2/1	medium
146720	EulerOS 2.0 SP2 : sox (EulerOS-SA-2021-1359)	Nessus	Huawei Local Security Checks	2021/2/22	2024/1/19	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium