CVE:CVE-2023-26590
CNNVD:CNNVD-202307-660
SoX是一套开源的音频处理工具。该产品支持播放、转换和录制多种格式音频。
SoX存在安全漏洞，该漏洞源于在lsx_aiffstartwrite函数存在浮点异常漏洞，可能导致拒绝服务。
solution:Upgrade sox_project sox to a higher version than 14.4.3,and avoid the version 14.4.3; Upgrade fedoraproject extra_packages_for_enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade fedoraproject fedora to a higher version than 38,and avoid the version 38; Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,and avoid the version 6.0,7.0