Nixpkgs security tracker

Untriaged

Permalink CVE-2023-32627

6.2 MEDIUM

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): HIGH

created 1 year, 2 months ago

Floating point exception in src/voc.c

A floating point exception vulnerability was found in sox, in the read_samples function at sox/src/voc.c:334:18. This flaw can lead to a denial of service.

References

https://access.redhat.com/security/cve/CVE-2023-32627 x_transferredvdb-entryx_refsource_REDHAT
RHBZ#2212282 issue-trackingx_transferredx_refsource_REDHAT
https://lists.debian.org/debian-lts-announce/2023/08/msg00015.html x_transferred

Affected products

sox

Matching in nixpkgs

pkgs.sox

Sample Rate Converter for audio

nixos-unstable 2021-05-09
- nixpkgs-unstable 2021-05-09
- nixos-unstable-small 2021-05-09

pkgs.soxr

Audio resampling library

nixos-unstable 0.1.3
- nixpkgs-unstable 0.1.3
- nixos-unstable-small 0.1.3

pkgs.soxt

GUI binding for using Open Inventor with Xt/Motif

nixos-unstable 2019-06-14
- nixpkgs-unstable 2019-06-14
- nixos-unstable-small 2019-06-14

pkgs.haskellPackages.sox

Play, write, read, convert audio signals using Sox

nixos-unstable 0.2.3.2
- nixpkgs-unstable 0.2.3.2
- nixos-unstable-small 0.2.3.2

pkgs.haskellPackages.soxlib

Write, read, convert audio signals using libsox

nixos-unstable 0.0.3.2
- nixpkgs-unstable 0.0.3.2
- nixos-unstable-small 0.0.3.2

pkgs.python311Packages.soxr

High quality, one-dimensional sample-rate conversion library

nixos-unstable 0.5.0.post1
- nixpkgs-unstable 0.5.0.post1
- nixos-unstable-small 0.5.0.post1

pkgs.python312Packages.soxr