CVE-2021-23210: 
NixOS vulnerability analysis and mitigation

A floating point exception (divide-by-zero) vulnerability was discovered in SoX (Sound eXchange) software, specifically in the read_samples() function of the voc.c file. The vulnerability was assigned CVE-2021-23210 and was reported on June 4, 2021. This security flaw affects various versions of SoX across multiple Linux distributions including Ubuntu, Debian, and Red Hat (CVE Mitre, Ubuntu Security).

The vulnerability is a divide-by-zero error located in the read_samples() function at line 334 of the voc.c file. The issue occurs when processing specially crafted input files, leading to a floating point exception. The severity of this vulnerability is rated as low according to security assessments (Arch Linux, Red Hat Bugzilla).

When exploited, this vulnerability can cause the SoX application to crash, resulting in a denial of service condition. The impact is limited to application availability and does not appear to allow for code execution or data compromise (CVE Mitre, Debian Security).

Multiple Linux distributions have released patches to address this vulnerability. Ubuntu has released updates across various versions (14.04 ESM through 22.10), Debian has fixed the issue in versions 14.4.2+git20190427-2+deb11u2 and later, and other distributions have also provided security updates (Ubuntu Notice, Debian Security).