Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-18189: A NULL pointer dereference flaw found in the way SoX handled processing of AIFF files. An attacker could potentially use this flaw to crash the SoX application by tricking it into processing crafted AIFF files. 99999: CVE-2017-18189 sox: NULL pointer dereference in startread function in xa.c
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | sox | 0:14.4.1-7.amzn2 |
| Amazon Linux · 2 | sox-debuginfo | 0:14.4.1-7.amzn2 |
| Amazon Linux · 2 | sox-devel | 0:14.4.1-7.amzn2 |
Vulnerabilities 1
-
Unscored —
In the startread function in xa.c in Sound eXchange (SoX) through 14.4.2, a corrupt header specifying zero channels tri…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2017-18189.html