CVE:CVE-2023-34432
CNNVD:CNNVD-202307-663
SoX是一套开源的音频处理工具。该产品支持播放、转换和录制多种格式音频。
sox存在安全漏洞，该漏洞源于sx_readbuf函数（位于sox/src/formats_i.c:98:16）中发现堆缓冲区溢出问题，可能会导致拒绝服务、代码执行或信息泄露。
solution:Upgrade sound_exchange_project sound_exchange to a higher version than 14.4.3,and avoid the version (,14.4.3]; Upgrade fedoraproject extra_packages_for_enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade fedoraproject fedora to a higher version than 38,and avoid the version 38; Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,and avoid the version 6.0,7.0