Known vulnerabilities in sox (Alpine package)
Vendor:
Alpine Linux Development Team
Software:
sox (Alpine package)
Software CPE:
cpe:2.3:o:alpine:sox_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website:
https://alpinelinux.org/
Total vulnerabilities:
13
Public exploits:
3
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (13)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU17769 - Integer overflow CVE-2019-8355 |
CWE-190 | Low | 14.4.2-r3, 14.4.2-r5 | 19.02.2019 |
SB2019021912 SB2019080110 SB2019071630 and 1 more |
||
| #VU17768 - Integer overflow CVE-2019-8354 |
CWE-190 | Low | 14.4.2-r5 | 19.02.2019 |
SB2019021912 SB2019080110 SB2019072489 and 1 more |
||
| #VU17767 - Stack-based buffer overflow CVE-2019-8356 |
CWE-121 | Low | 14.4.2-r3, 14.4.2-r5 | 19.02.2019 |
SB2019021912 SB2019080110 SB2019071631 and 1 more |
||
| #VU17766 - NULL Pointer Dereference CVE-2019-8357 |
CWE-476 | Low | 14.4.2-r3, 14.4.2-r5 | 19.02.2019 |
SB2019021912 SB2019080110 SB2019071632 and 1 more |
||
| #VU33438 - NULL Pointer Dereference CVE-2017-18189 |
CWE-476 | Medium | 14.4.2-r5 | 15.02.2018 |
SB2019072488 SB2019080663 SB2020013024 and 1 more |
||
| #VU33437 - Use After Free CVE-2017-15642 |
CWE-416 | Low | 14.4.2-r5 | 19.10.2017 |
SB2019072487 SB2018100609 SB2018020141 and 2 more |
||
| #VU33349 - Memory corruption CVE-2017-15370 |
CWE-119 | Low | 14.4.2-r5 | 16.10.2017 |
SB2019072482 SB2018100609 SB2018011117 and 4 more |
||
| #VU33350 - Reachable Assertion CVE-2017-15371 |
CWE-617 | Low | 14.4.2-r5 | 16.10.2017 |
SB2019072483 SB2018100609 SB2018010314 and 6 more |
||
| #VU33436 - Memory corruption CVE-2017-15372 |
CWE-119 | Low | 14.4.2-r5 | 16.10.2017 |
SB2019072486 SB2018100609 SB2018020141 and 2 more |
||
| #VU32014 - Out-of-bounds read CVE-2017-11358 |
CWE-125 | Low | 14.4.2-r5 | 31.07.2017 |
SB2017073117 SB2019072481 SB2018100609 and 2 more |
||
| #VU32016 - Divide By Zero CVE-2017-11359 |
CWE-369 | Medium | 14.4.2-r5 | 31.07.2017 |
SB2017073119 SB2019072485 SB2018100609 and 2 more |
||
| #VU32015 - Divide By Zero CVE-2017-11332 |
CWE-369 | Medium | 14.4.2-r5 | 31.07.2017 |
SB2017073118 SB2019072484 SB2018100609 and 2 more |
||
| #VU32454 - Memory corruption CVE-2014-8145 |
CWE-119 | Medium | 14.4.1-r1 | 01.01.2015 |
SB2015010101 SB2015013014 SB2016121149 and 1 more |