Vulnerability Details : CVE-2021-23210
A floating point exception (divide-by-zero) issue was discovered in SoX in functon read_samples() of voc.c file. An attacker with a crafted file, could cause an application to crash.
Products affected by CVE-2021-23210
- cpe:2.3:a:sox_project:sox:14.4.2-7:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2021-23210
0.12%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 48 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-23210
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.5
|
MEDIUM | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
1.8
|
3.6
|
NIST |
CWE ids for CVE-2021-23210
-
The product divides a value by zero.Assigned by:
- nvd@nist.gov (Secondary)
- secalert@redhat.com (Primary)
References for CVE-2021-23210
-
https://security.archlinux.org/CVE-2021-23210
CVE-2021-23210 - sox - Arch LinuxThird Party Advisory
-
https://bugzilla.redhat.com/show_bug.cgi?id=1975670
1975670 – (CVE-2021-23210) CVE-2021-23210 sox: divide by zero in voc.cIssue Tracking;Third Party Advisory
-
https://access.redhat.com/security/cve/CVE-2021-23210
CVE-2021-23210- Red Hat Customer PortalThird Party Advisory
-
https://sourceforge.net/p/sox/bugs/351/
SoX - Sound eXchange / Bugs / #351 div zero in voc.cExploit;Third Party Advisory
Jump to