製品・ソフトウェアに関する情報

JVN脆弱性詳細

Sound eXchange における境界外読み取りに関する脆弱性

Title	Sound eXchange における境界外読み取りに関する脆弱性
Summary	Sound eXchange (SoX) には、境界外読み取りに関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	July 30, 2017, midnight
Registration Date	Aug. 29, 2017, 6:08 p.m.
Last Update	Aug. 29, 2017, 6:08 p.m.

Affected System

Sound eXchange

Sound eXchange 14.4.2

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2017-11358	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11358
National Vulnerability Database (NVD)
2	CVE-2017-11358	https://nvd.nist.gov/vuln/detail/CVE-2017-11358

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-125	https://cwe.mitre.org/data/definitions/125.html

ベンダー情報

No	Name	URL
Sound eXchange
1	Top Page	http://sox.sourceforge.net/

その他

No	Name	URL
関連文書
1	Sound eXchange (SoX) multiple vulnerabilities	http://seclists.org/fulldisclosure/2017/Jul/81

Change Log

No	Changed Details	Date of change
0	[2017年08月29日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2017-11358

Summary	The read_samples function in hcom.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted hcom file.
Publication Date	July 31, 2017, 10:29 p.m.
Registration Date	Jan. 26, 2021, 1:12 p.m.
Last Update	Nov. 21, 2024, 12:07 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:sound_exchange_project:sound_exchange:14.4.2:::::::*

Related information, measures and tools

No	URL	タグ
1	http://seclists.org/fulldisclosure/2017/Jul/81	Exploit Mailing List Third Party Advisory
2	http://seclists.org/fulldisclosure/2017/Jul/81	Exploit Mailing List Third Party Advisory
3	http://www.openwall.com/lists/oss-security/2023/02/03/3
4	http://www.openwall.com/lists/oss-security/2023/02/03/3
5	http://www.openwall.com/lists/oss-security/2023/02/04/2
6	http://www.openwall.com/lists/oss-security/2023/02/04/2
7	http://www.openwall.com/lists/oss-security/2023/02/05/1
8	http://www.openwall.com/lists/oss-security/2023/02/05/1
9	http://www.openwall.com/lists/oss-security/2023/02/06/1
10	http://www.openwall.com/lists/oss-security/2023/02/06/1
11	https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html	Third Party Advisory
12	https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html	Third Party Advisory
13	https://lists.debian.org/debian-lts-announce/2019/03/msg00007.html	Third Party Advisory
14	https://lists.debian.org/debian-lts-announce/2019/03/msg00007.html	Third Party Advisory
15	https://security.gentoo.org/glsa/201810-02	Third Party Advisory
16	https://security.gentoo.org/glsa/201810-02	Third Party Advisory
17	https://www.exploit-db.com/exploits/42398/	Exploit Third Party Advisory VDB Entry
18	https://www.exploit-db.com/exploits/42398/	Exploit Third Party Advisory VDB Entry

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-125	境界外読み取り	https://cwe.mitre.org/data/definitions/125.html