- Vulnerability/
- USN-4079-2
USN-4079-2: SoX vulnerabilities
First published: Thu Aug 01 2019(Updated: )
USN-4079-1 fixed vulnerabilities in SoX. This update provides the corresponding update for Ubuntu 18.04 LTS and Ubuntu 19.04. Original advisory details: It was discovered that SoX incorrectly handled certain MP3 files. An attacker could possibly use this issue to cause a denial of service. (CVE-2019-8354, CVE-2019-8355, CVE-2019-8356, CVE-2019-8357)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/libsox3 | <14.4.2-3ubuntu0.19.04.1 | 14.4.2-3ubuntu0.19.04.1 |
| Ubuntu OpenSSH Client | =19.04 | |
| All of | ||
| ubuntu/sox | <14.4.2-3ubuntu0.19.04.1 | 14.4.2-3ubuntu0.19.04.1 |
| Ubuntu OpenSSH Client | =19.04 | |
| All of | ||
| ubuntu/libsox3 | <14.4.2-3ubuntu0.18.04.1 | 14.4.2-3ubuntu0.18.04.1 |
| Ubuntu OpenSSH Client | =18.04 | |
| All of | ||
| ubuntu/sox | <14.4.2-3ubuntu0.18.04.1 | 14.4.2-3ubuntu0.18.04.1 |
| Ubuntu OpenSSH Client | =18.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2019-8354
- https://ubuntu.com/security/CVE-2019-8355
- https://ubuntu.com/security/CVE-2019-8356
- https://ubuntu.com/security/CVE-2019-8357
- https://ubuntu.com/security/notices/USN-4079-1
- https://launchpad.net/ubuntu/+source/sox/14.4.2-3ubuntu0.19.04.1
- https://launchpad.net/ubuntu/+source/sox/14.4.2-3ubuntu0.18.04.1
- https://ubuntu.com/security/notices/USN-4079-2 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the vulnerability ID for SoX?
The vulnerability ID for SoX is CVE-2019-8354.
What is the remedy for the SoX vulnerability?
The remedy for the SoX vulnerability is to update to version 14.4.2-3ubuntu0.19.04.1 (for Ubuntu 19.04) or 14.4.2-3ubuntu0.18.04.1 (for Ubuntu 18.04).
How can an attacker exploit the SoX vulnerability?
An attacker could exploit the SoX vulnerability to cause a denial of service.
What are the affected software versions for the SoX vulnerability?
The affected software versions for the SoX vulnerability are 14.4.2-3ubuntu0.19.04.1 (for Ubuntu 19.04) and 14.4.2-3ubuntu0.18.04.1 (for Ubuntu 18.04).
Where can I find more information about the SoX vulnerability?
You can find more information about the SoX vulnerability at the following references: [CVE-2019-8354](https://ubuntu.com/security/CVE-2019-8354), [CVE-2019-8355](https://ubuntu.com/security/CVE-2019-8355), [CVE-2019-8356](https://ubuntu.com/security/CVE-2019-8356).
- agent/references
- agent/type
- agent/severity
- agent/last-modified-date
- agent/first-publish-date
- agent/title
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/tags
- agent/softwarecombine
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu openssh client
- version/ubuntu openssh client/19.04
- version/ubuntu openssh client/18.04