Medium severity5.5NVD Advisory· Published Jul 31, 2017· Updated May 13, 2026
CVE-2017-11332
CVE-2017-11332
Description
The startread function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted wav file.
Affected products
3- cpe:2.3:a:sound_exchange_project:sound_exchange:14.4.2:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- seclists.org/fulldisclosure/2017/Jul/81nvdExploitMailing ListThird Party Advisory
- www.exploit-db.com/exploits/42398/nvdExploitThird Party AdvisoryVDB Entry
- lists.debian.org/debian-lts-announce/2017/11/msg00043.htmlnvdThird Party Advisory
- lists.debian.org/debian-lts-announce/2019/03/msg00007.htmlnvdThird Party Advisory
- security.gentoo.org/glsa/201810-02nvdThird Party Advisory
News mentions
0No linked articles in our index yet.