CVE-2017-15370
There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange ...
There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.
- Record
CVE-2017-15370- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.
- Record
CVE-2017-15370- Updated
- 2026-11-02
EUVDEUVD-2017-6824 No score
There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.
- Record
EUVD-2017-6824- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mhq7-f3rw-g8h6
There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange ...
There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.
- Record
GHSA-mhq7-f3rw-g8h6- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
OSVAZL-43930
CVE-2017-15370 affecting package sox for versions less than 14.4.2.0-33
There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.
- Record
AZL-43930- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVAZL-44898
CVE-2017-15370 affecting package sox for versions less than 14.4.2.0-33
There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.
- Record
AZL-44898- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 7 moreShow less
OSV
There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.
- Record
CVE-2017-15370- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2017-15370
There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.
- Record
DEBIAN-CVE-2017-15370- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-15370
There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.
- Record
UBUNTU-CVE-2017-15370- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2018-0105 No score
Updated sox packages fix security vulnerability
There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file (CVE-2017-15370).
There is a reachable assertion abort in the function sox_append_comment() in formats.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file (CVE-2017-15371).
- Record
MGASA-2018-0105- Updated
- 2026-11-02
OSVopenSUSE-SU-2018:0489-1 No score
Security update for sox
This update for sox fixes the following issues:
- CVE-2017-11332: Fixed the startread function in wav.c, which allowed remote attackers to cause a DoS (divide-by-zero) via a crafted wav file. (boo#1081140)
- CVE-2017-11358: Fixed the read_samples function in hcom.c, which allowed remote attackers to cause a DoS (invalid memory read) via a crafted hcom file. (boo#1081141)
- CVE-2017-11359: Fixed the wavwritehdr function in wav.c, which allowed remote attackers to cause a DoS (divide-by-zero) when converting a a crafted snd file to a wav file. (boo#1081142)
- CVE-2017-15370: Fixed a heap-based buffer overflow in the ImaExpandS function of ima_rw.c, which allowed remote attackers to cause a DoS during conversion of a crafted audio file. (boo#1063439)
- CVE-2017-15371: Fixed an assertion abort in the function sox_append_comment() in formats.c, which allowed remote attackers to cause a DoS during conversion of a crafted audio file. (boo#1063450)
- CVE-2017-15372: Fixed a stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function of adpcm.c, which allowed remote attackers to cause a DoS during conversion of a crafted audio file. (boo#1063456)
- CVE-2017-15642: Fixed an Use-After-Free vulnerability in lsx_aiffstartread in aiff.c, which could be triggered by an attacker by providing a malformed AIFF file. (boo#1064576)
- CVE-2017-18189: Fixed a NULL pointer dereference triggered by a corrupt header specifying zero channels in the startread function in xa.c, which allowed remote attackers to cause a DoS (boo#1081146).
- Record
openSUSE-SU-2018:0489-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2018:0493-1 No score
Security update for sox
This update for sox fixes the following issues:
- CVE-2017-11332: Fixed the startread function in wav.c, which allowed remote attackers to cause a DoS (divide-by-zero) via a crafted wav file. (boo#1081140)
- CVE-2017-11358: Fixed the read_samples function in hcom.c, which allowed remote attackers to cause a DoS (invalid memory read) via a crafted hcom file. (boo#1081141)
- CVE-2017-11359: Fixed the wavwritehdr function in wav.c, which allowed remote attackers to cause a DoS (divide-by-zero) when converting a a crafted snd file to a wav file. (boo#1081142)
- CVE-2017-15370: Fixed a heap-based buffer overflow in the ImaExpandS function of ima_rw.c, which allowed remote attackers to cause a DoS during conversion of a crafted audio file. (boo#1063439)
- CVE-2017-15371: Fixed an assertion abort in the function sox_append_comment() in formats.c, which allowed remote attackers to cause a DoS during conversion of a crafted audio file. (boo#1063450)
- CVE-2017-15372: Fixed a stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function of adpcm.c, which allowed remote attackers to cause a DoS during conversion of a crafted audio file. (boo#1063456)
- CVE-2017-15642: Fixed an Use-After-Free vulnerability in lsx_aiffstartread in aiff.c, which could be triggered by an attacker by providing a malformed AIFF file. (boo#1064576)
- CVE-2017-18189: Fixed a NULL pointer dereference triggered by a corrupt header specifying zero channels in the startread function in xa.c, which allowed remote attackers to cause a DoS (boo#1081146).
- Record
openSUSE-SU-2018:0493-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11394-1 No score
libsox3-14.4.2-5.17 on GA media
These are all security issues fixed in the libsox3-14.4.2-5.17 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11394-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
soxAzure Linux:2 |
before 14.4.2.0-33 | 14.4.2.0-33 |
soxAzure Linux:3 |
before 14.4.2.0-33 | 14.4.2.0-33 |
soxDebian:12 |
before 14.4.2-2 | 14.4.2-2 |
soxDebian:13 |
before 14.4.2-2 | 14.4.2-2 |
soxDebian:7 |
before 14.4.0-3+deb7u2, plus listed versions 14.4.0-314.4.0-3+deb7u1 |
14.4.0-3+deb7u2 |
soxDebian:8 |
before 14.4.1-5+deb8u2, plus listed versions 14.4.1-514.4.1-5+deb8u1 |
14.4.1-5+deb8u2 |
soxMageia:5 |
before 14.4.1-6.1.mga5 | 14.4.1-6.1.mga5 |
soxMageia:6 |
before 14.4.2-7.1.mga6 | 14.4.2-7.1.mga6 |
soxUbuntu:14.04:LTS |
before 14.4.1-3ubuntu1.1, plus listed versions 14.4.1-314.4.1-3ubuntu1 |
14.4.1-3ubuntu1.1 |
soxUbuntu:16.04:LTS |
before 14.4.1-5ubuntu0.1, plus listed versions 14.4.1-5 |
14.4.1-5ubuntu0.1 |
soxSUSE:Package Hub 12 SP3 |
before 14.4.2-5.1 | 14.4.2-5.1 |
soxopenSUSE:Tumbleweed |
before 14.4.2-5.17 | 14.4.2-5.17 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-15370 is a medium vulnerability (CVSS 5.5) in Sound Exchange Project Exchange, published October 16, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.72%, the 77th percentile. Fixed in sox 14.4.2.0-33.
References
lists.debian.org/debian-lts-announce/2017/11/msg00043.html
bugzilla.redhat.com/show_bug.cgi?id=1500554
security.gentoo.org/glsa/201810-02
nvd.nist.gov/vuln/detail/CVE-2017-15370
github.com/advisories/GHSA-mhq7-f3rw-g8h6
Show 22 moreShow less
security-tracker.debian.org/tracker/CVE-2017-15370
advisories.mageia.org/MGASA-2018-0105.html
bugs.mageia.org/show_bug.cgi?id=22469
lists.fedoraproject.org/archives/list/[email protected]/thread/LU6OQGTJOLIFAOPHQI6CPLGMN4KKMLIX
ubuntu.com/security/CVE-2017-15370
cve.org/CVERecord?id=CVE-2017-15370
bugzilla.suse.com/1063439
suse.com/security/cve/CVE-2017-11332