CVE catalog

CVE-2023-32627

sox: CVE-2023-32627

[CVE catalog]

Severity
Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.28% · Oct 25, 2026

A floating point exception vulnerability was found in sox, in the read_samples function at sox/src/voc.c:334:18. This flaw can lead to a denial of service.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansoxtrixie14.4.2+git20190427-5fixed
Debiansoxbookworm14.4.2+git20190427-3.5vulnerable
Ubuntusoxpro14.4.1-5build1vulnerable
Ubuntusoxpro14.4.2-2vulnerable
Ubuntusoxpro14.4.2-3vulnerable
Ubuntusoxpro14.4.2-3ubuntu0.1~esm1vulnerable
Ubuntusoxpro14.4.2-3ubuntu0.18.04.1vulnerable
Ubuntusoxpro14.4.2-3ubuntu0.18.04.2vulnerable
Ubuntusoxpro14.4.2-3ubuntu0.18.04.3vulnerable
Ubuntusoxpro14.4.2-3ubuntu0.18.04.3+esm1fixed
Ubuntusox20.0414.4.2+git20190427-1build1vulnerable
Ubuntusox20.0414.4.2+git20190427-2vulnerable
Ubuntusox20.0414.4.2+git20190427-2+deb11u1build0.20.04.1vulnerable
Ubuntusox20.0414.4.2+git20190427-2+deb11u2build0.20.04.1vulnerable
Ubuntusox20.0414.4.2+git20190427-2+deb11u2ubuntu0.20.04.1fixed
Ubuntusox22.0414.4.2+git20190427-2vulnerable
Ubuntusox22.0414.4.2+git20190427-2+deb11u1build0.22.04.1vulnerable
Ubuntusox22.0414.4.2+git20190427-2+deb11u2build0.22.04.1vulnerable
Ubuntusox22.0414.4.2+git20190427-2+deb11u2ubuntu0.22.04.1fixed
Ubuntusoxpro14.4.1-5build1vulnerable
Ubuntusoxpro14.4.2-2vulnerable
Ubuntusoxpro14.4.2-3vulnerable
Ubuntusoxpro14.4.2-3ubuntu0.1~esm1vulnerable
Ubuntusoxpro14.4.2-3ubuntu0.18.04.1vulnerable
Ubuntusoxpro14.4.2-3ubuntu0.18.04.2vulnerable
Ubuntusoxpro14.4.2-3ubuntu0.18.04.3vulnerable
Ubuntusoxpro14.4.2-3ubuntu0.18.04.3+esm1fixed
Ubuntusox20.0414.4.2+git20190427-1build1vulnerable
Ubuntusox20.0414.4.2+git20190427-2vulnerable
Ubuntusox20.0414.4.2+git20190427-2+deb11u1build0.20.04.1vulnerable
Ubuntusox20.0414.4.2+git20190427-2+deb11u2build0.20.04.1vulnerable
Ubuntusox20.0414.4.2+git20190427-2+deb11u2ubuntu0.20.04.1fixed
Ubuntusox22.0414.4.2+git20190427-2vulnerable
Ubuntusox22.0414.4.2+git20190427-2+deb11u1build0.22.04.1vulnerable
Ubuntusox22.0414.4.2+git20190427-2+deb11u2build0.22.04.1vulnerable
Ubuntusox22.0414.4.2+git20190427-2+deb11u2ubuntu0.22.04.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansoxsourcetrixie14.4.2+git20190427-4not yet assignedNot reported[1041112]
Debiansoxsourcebookworm(unfixed)not yet assignedNot reported[1041112]
Ubuntusoxdebpro14.4.2-3ubuntu0.18.04.3+esm1Not reportedUSN-6345-1Not reported
Ubuntusoxdeb20.0414.4.2+git20190427-2+deb11u2ubuntu0.20.04.1Not reportedUSN-6345-1Not reported
Ubuntusoxdeb22.0414.4.2+git20190427-2+deb11u2ubuntu0.22.04.1Not reportedUSN-6345-1Not reported
Ubuntusoxdebpro14.4.2-3ubuntu0.18.04.3+esm1Not reportedUBUNTU-CVE-2023-32627Not reported
Ubuntusoxdeb20.0414.4.2+git20190427-2+deb11u2ubuntu0.20.04.1Not reportedUBUNTU-CVE-2023-32627Not reported
Ubuntusoxdeb22.0414.4.2+git20190427-2+deb11u2ubuntu0.22.04.1Not reportedUBUNTU-CVE-2023-32627Not reported

[Debian bug #1041112]

Notes

[bookworm] sox: Minor issue

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]