5.5
CVE-2023-26590
- EPSS 0.21%
- Veröffentlicht 10.07.2023 18:15:10
- Zuletzt bearbeitet 27.06.2025 18:51:27
- Erkennungen
LoginFloating point exception in src/aiff.c
A floating point exception vulnerability was found in sox, in the lsx_aiffstartwrite function at sox/src/aiff.c:622:58. This flaw can lead to a denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sound Exchange Project ≫ Sound Exchange Version 14.4.3
Fedoraproject ≫ Extra Packages For Enterprise Linux Version 8.0
Fedoraproject ≫ Fedora Version 38
Redhat ≫ Enterprise Linux Version 6.0
Redhat ≫ Enterprise Linux Version 7.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.21% | 0.107 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
| RedHat | 6.2 | 2.5 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
CWE-1077 Floating Point Comparison with Incorrect Operator
The code performs a comparison such as an equality test between two float (floating point) values, but it uses comparison operators that do not account for the possibility of loss of precision.
CWE-697 Incorrect Comparison
The product compares two entities in a security-relevant context, but the comparison is incorrect.
https://access.redhat.com/security/cve/CVE-2023-26590
https://bugzilla.redhat.com/show_bug.cgi?id=2212279