In the startread function in xa.c in Sound eXchange (SoX) through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sound_exchange | Sound_exchange_project | * | 14.4.2 (including) |
| Red Hat Enterprise Linux 7 | RedHat | sox-0:14.4.1-7.el7 | * |
| Sox | Ubuntu | artful | * |
| Sox | Ubuntu | trusty | * |
| Sox | Ubuntu | upstream | * |
| Sox | Ubuntu | xenial | * |