CVE-2022-31651

Advisory

Audagio and prior versions ship with vulnerable dependencies (SoX == 1.3.3).
In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a.
https://github.com/BrianMargolis/AudAugio/blob/master/requirements.txt

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://sourceforge.net/p/sox/bugs/360/
• http://www.openwall.com/lists/oss-security/2023/02/03/3
• https://lists.debian.org/debian-lts-announce/2023/02/msg00009.html
• https://www.debian.org/security/2023/dsa-5356
• https://security-tracker.debian.org/tracker/CVE-2022-31651
• https://people.canonical.com/~ubuntu-security/cve/CVE-2022-31651
• https://nvd.nist.gov/vuln/detail/CVE-2022-31651
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31651