Description
In the startread function in xa.c in Sound eXchange (SoX) through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | sox | 14.4.2-2 | — |
| Debian 12 | sox | 14.4.2-2 | — |
| Debian 8 | sox | 14.4.1-5+deb8u2 | DLA-1695-1 |
| Debian 7 | sox | 14.4.0-3+deb7u2 | DLA-1197-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | sox | 14.4.1-5ubuntu0.1 | — |
| Ubuntu 14.04 LTS | sox | 14.4.1-3ubuntu1.1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | sox +1 | 14.4.1-7.el7 | RHSA-2019:2283 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Package Hub 12 SP3 | sox | 14.4.2-5.1 | openSUSE-SU-2018:0493-1, openSUSE-SU-2018:0489-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | sox | 14.4.2-5.17 | openSUSE-SU-2024:11394-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | sox | 14.4.2-r5 | — |
| Alpine v3.23 | sox | 14.4.2-r5 | — |
| Alpine v3.22 | sox | 14.4.2-r5 | — |
| Alpine v3.21 | sox | 14.4.2-r5 | — |
| Alpine v3.20 | sox | 14.4.2-r5 | — |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | sox | 14.4.2-r5 | — |
| Alpine v3.18 | sox | 14.4.2-r5 | — |
| Alpine v3.17 | sox | 14.4.2-r5 | — |
| Alpine v3.16 | sox | 14.4.2-r5 | — |
| Alpine v3.15 | sox | 14.4.2-r5 | — |
| Alpine v3.14 | sox | 14.4.2-r5 | — |
| Alpine v3.13 | sox | 14.4.2-r5 | — |
| Alpine v3.12 | sox | 14.4.2-r5 | — |
| Alpine v3.11 | sox | 14.4.2-r5 | — |
| Alpine v3.10 | sox | 14.4.2-r5 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | sox +1 | 14.4.1-7.amzn2 | ALAS2-2019-1352 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | sox +1 | 14.4.1-7.el7 | ELSA-2019-2283 |
Advisories 9
- WID-SEC-2022-0517 Red Hat Enterprise Linux: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 18, 2026
- RHSA-2019:2283 Red Hat Security Advisory: sox security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DLA-1695-1 sox - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-1197-1 sox - security update Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:11394-1 libsox3-14.4.2-5.17 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2018:0493-1 Security update for sox SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2018:0489-1 Security update for sox SUSE / openSUSE Security Updates · Feb 4, 2026
- ALAS2-2019-1352 Low: sox security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Nov 7, 2019
- ELSA-2019-2283 Low: sox security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Aug 13, 2019
References
- https://public-inbox.org/sox-devel/20171109114554.16297-1-mans%40mansr.com/raw
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=881121
- [debian-lts-announce] 20190228 [SECURITY] [DLA 1695-1] sox security update mailing-list
- RHSA-2019:2283 vendor-advisory
- FEDORA-2020-1dfaa1963b vendor-advisory
- FEDORA-2020-cb7b7181a0 vendor-advisory