CVE Vulnerabilities

CVE-2021-33844

Divide By Zero

Published: Aug 25, 2022 | Modified: Feb 12, 2023
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
3.3 LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Ubuntu
MEDIUM

A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file. An attacker with a crafted wav file, could cause an application to crash.

Weakness

The product divides a value by zero.

Affected Software

Name Vendor Start Version End Version
Sox Sox_project 14.4.2-7 (including) 14.4.2-7 (including)
Sox Ubuntu bionic *
Sox Ubuntu esm-apps/xenial *
Sox Ubuntu focal *
Sox Ubuntu jammy *
Sox Ubuntu kinetic *
Sox Ubuntu lunar *
Sox Ubuntu mantic *
Sox Ubuntu trusty *
Sox Ubuntu trusty/esm *
Sox Ubuntu xenial *

References