Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-33844: A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file. An attacker with a crafted wav file, could cause an application to crash.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | sox | 0:14.4.1-7.amzn2.0.3 |
| Amazon Linux · 2 | sox-debuginfo | 0:14.4.1-7.amzn2.0.3 |
| Amazon Linux · 2 | sox-devel | 0:14.4.1-7.amzn2.0.3 |
Vulnerabilities 1
-
Unscored —
A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file. An attack…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-33844.html