High severity7.5NVD Advisory· Published Feb 15, 2018· Updated Jun 17, 2026
CVE-2017-18189
CVE-2017-18189
Description
In the startread function in xa.c in Sound eXchange (SoX) through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: <=14.4.2
- osv-coords2 versionspkg:rpm/opensuse/sox&distro=openSUSE%20Tumbleweedpkg:rpm/suse/sox&distro=SUSE%20Package%20Hub%2012%20SP3
< 14.4.2-5.17+ 1 more
- (no CPE)range: < 14.4.2-5.17
- (no CPE)range: < 14.4.2-5.1
Patches
Vulnerability mechanics
References
6- bugs.debian.org/cgi-bin/bugreport.cginvdExploitIssue TrackingMailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2019/02/msg00042.htmlnvdMailing ListThird Party Advisory
- access.redhat.com/errata/RHSA-2019:2283nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62RARFRXGKPNNFFNVDV7DHJSOKAIZ3CX/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EUKFZQSZG2ABMTAMOGBMY7MJNSGEIYTL/nvd
- public-inbox.org/sox-devel/20171109114554.16297-1-mans%40mansr.com/rawnvd
News mentions
0No linked articles in our index yet.