CVE-2023-32627
10.07.2023, 18:15
A floating point exception vulnerability was found in sox, in the read_samples function at sox/src/voc.c:334:18. This flaw can lead to a denial of service.Enginsight
| Vendor | Product | Version |
|---|---|---|
| sox_project | sox | 14.4.3 |
| fedoraproject | extra_packages_for_enterprise_linux | 8.0 |
| redhat | enterprise_linux | 6.0 |
| redhat | enterprise_linux | 7.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| sox |
|
Common Weakness Enumeration
- CWE-1077 - Floating Point Comparison with Incorrect OperatorThe code performs a comparison such as an equality test between two float (floating point) values, but it uses comparison operators that do not account for the possibility of loss of precision.
- CWE-697 - Incorrect ComparisonThe software compares two entities in a security-relevant context, but the comparison is incorrect, which may lead to resultant weaknesses.
References