Medium USN-6345-1 1 CVE

sox vulnerability

Published Sep 6, 2023 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that SoX incorrectly handled certain inputs. If a
user or an automated system were tricked into opening a specially crafted
input file, an attacker could possibly use this issue to cause a denial
of service.

Fixed packages 5

Release	Package	Fixed in
Ubuntu · 20.04 LTS 20.04:LTS	sox	14.4.2+git20190427-2+deb11u2ubuntu0.20.04.1
Ubuntu · 22.04 LTS 22.04:LTS	sox	14.4.2+git20190427-2+deb11u2ubuntu0.22.04.1
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS	sox	14.4.1-3ubuntu1.1+esm4
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	sox	14.4.1-5+deb8u4ubuntu0.1+esm3
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS	sox	14.4.2-3ubuntu0.18.04.3+esm1

Vulnerabilities 1

Medium 6.2

CVE-2023-32627

Floating point exception in src/voc.c

A floating point exception vulnerability was found in sox, in the read_samples function at sox/src/voc.c:334:18. This flaw can lead to a denial of service.

Red Hat Fedora Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux

Jul 10, 2023

References

report
https://ubuntu.com/security/CVE-2023-32627