{"containers": {"cna": {"affected": [{"product": "SoX (Sound eXchange)", "vendor": "n/a", "versions": [{"status": "affected", "version": "Not Known"}]}], "descriptions": [{"lang": "en", "value": "A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file. An attacker with a crafted wav file, could cause an application to crash."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-369", "description": "CWE-369 - Divide By Zero", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-08-25T19:34:38", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1975664"}, {"tags": ["x_refsource_MISC"], "url": "https://access.redhat.com/security/cve/CVE-2021-33844"}, {"tags": ["x_refsource_MISC"], "url": "https://sourceforge.net/p/sox/bugs/349/"}, {"tags": ["x_refsource_MISC"], "url": "https://security.archlinux.org/CVE-2021-33844"}]}}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2021-33844", "datePublished": "2022-08-25T19:34:38", "dateReserved": "2021-06-04T00:00:00", "dateUpdated": "2022-08-25T19:34:38", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sox_project:sox:14.4.2-7:*:*:*:*:*:*:*", "matchCriteriaId": "D568262D-27C8-459D-8901-95F057CCB7F5", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file. An attacker with a crafted wav file, could cause an application to crash."}, {"lang": "es", "value": "Se ha detectado un problema de excepci\u00f3n de punto flotante (divisi\u00f3n por cero) en SoX en la funci\u00f3n startread() del archivo wav.c. Un atacante con un archivo wav dise\u00f1ado, podr\u00eda causar un bloqueo en la aplicaci\u00f3n."}], "id": "CVE-2021-33844", "lastModified": "2023-02-12T22:15:19.117", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-08-25T20:15:09.087", "references": [{"source": "secalert@redhat.com", "tags": ["Third Party Advisory"], "url": "https://access.redhat.com/security/cve/CVE-2021-33844"}, {"source": "secalert@redhat.com", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1975664"}, {"source": "secalert@redhat.com", "tags": ["Third Party Advisory"], "url": "https://security.archlinux.org/CVE-2021-33844"}, {"source": "secalert@redhat.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://sourceforge.net/p/sox/bugs/349/"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-369"}], "source": "secalert@redhat.com", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-369"}], "source": "nvd@nist.gov", "type": "Secondary"}]}

{}