SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Paid content will be excluded from the download.

Download | Alert*

OVAL

CVE-2017-15642 -- sox

ID: oval:org.secpod.oval:def:2000230	Date: (C)2019-06-02 (M)2023-04-27
Class: VULNERABILITY	Family: unix

In lsx_aiffstartread in aiff.c in Sound eXchange 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file.

Platform:

Debian 8.x

Debian 9.x

Product:

sox

Reference:

CVE-2017-15642

CVE 1

CPE 5