CVE-2023-34432: Heap-buffer-overflow in src/formats_i.c
First published: Mon Jun 05 2023(Updated: )
A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16. This flaw can lead to a denial of service, code execution, or information disclosure.
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sound Exchange Project Sound Exchange | <=14.4.3 | |
| Fedoraproject Extra Packages For Enterprise Linux | =8.0 | |
| Fedoraproject Fedora | =38 | |
| Redhat Enterprise Linux | =6.0 | |
| Redhat Enterprise Linux | =7.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-34432?
CVE-2023-34432 is a heap buffer overflow vulnerability found in sox.
How does CVE-2023-34432 impact the affected software?
CVE-2023-34432 can lead to a denial of service, code execution, or information disclosure.
Which software is affected by CVE-2023-34432?
The affected software includes Sound Exchange Project Sound Exchange, Redhat Enterprise Linux versions 6.0 and 7.0, Fedoraproject Extra Packages For Enterprise Linux version 8.0, and Fedoraproject Fedora version 38.
What is the severity level of CVE-2023-34432?
CVE-2023-34432 has a severity level of 7 (high).
How can I fix CVE-2023-34432?
To fix CVE-2023-34432, it is recommended to update the affected software to a version that has addressed the vulnerability.
- collector/nvd-latest
- collector/nvd-index
- agent/author
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/severity
- agent/references
- agent/description
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/title
- agent/last-modified-date
- agent/event
- agent/tags
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2023-34432
- vendor/sound exchange project
- canonical/sound exchange project sound exchange
- version/sound exchange project sound exchange/14.4.3
- vendor/redhat
- canonical/redhat enterprise linux
- version/redhat enterprise linux/7.0
- version/redhat enterprise linux/6.0
- vendor/fedoraproject
- canonical/fedoraproject extra packages for enterprise linux
- version/fedoraproject extra packages for enterprise linux/8.0
- canonical/fedoraproject fedora
- version/fedoraproject fedora/38