CVE-2019-8357 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	5.5 MEDIUM	LOCAL	LOW	NONE	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 63%

Vendor	Product	Version
sound_exchange_project	sound_exchange	14.4.2

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

sox

bullseye (security)	14.4.2+git20190427-2+deb11u2 fixed
bullseye	14.4.2+git20190427-2+deb11u2 fixed
bookworm	14.4.2+git20190427-3.5 fixed
sid	14.4.2+git20190427-5 fixed
trixie	14.4.2+git20190427-5 fixed

Ubuntu Releases

Ubuntu Product

Codename

sox

jammy	Fixed 14.4.2+git20190427-1 released
impish	Fixed 14.4.2+git20190427-1 released
hirsute	Fixed 14.4.2+git20190427-1 released
groovy	Fixed 14.4.2+git20190427-1 released
focal	Fixed 14.4.2+git20190427-1 released
eoan	Fixed 14.4.2+git20190427-1 released
disco	Fixed 14.4.2-3ubuntu0.19.04.1 released
cosmic	ignored
bionic	Fixed 14.4.2-3ubuntu0.18.04.1 released
xenial	Fixed 14.4.1-5+deb8u4ubuntu0.1 released
trusty	Fixed 14.4.1-3ubuntu1.1+esm1 released

Common Weakness Enumeration

CWE-476 - NULL Pointer Dereference
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

References

https://lists.debian.org/debian-lts-announce/2019/05/msg00040.html

https://sourceforge.net/p/sox/bugs/318

https://usn.ubuntu.com/4079-1/

https://usn.ubuntu.com/4079-2/

https://lists.debian.org/debian-lts-announce/2019/05/msg00040.html

https://sourceforge.net/p/sox/bugs/318

https://usn.ubuntu.com/4079-1/

https://usn.ubuntu.com/4079-2/