CVE-2014-3970
The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure and abort) via an empty UDP packet.
| Software | From | Fixed in |
|---|---|---|
| pulseaudio / pulseaudio | 2.0 | 2.0.x |
| pulseaudio / pulseaudio | 1.1 | 1.1.x |
| pulseaudio / pulseaudio | 5.0 | 5.0.x |
| pulseaudio / pulseaudio | 4.0 | 4.0.x |
| pulseaudio / pulseaudio | 1.99.2 | 1.99.2.x |
| pulseaudio / pulseaudio | 3.0 | 3.0.x |
| pulseaudio / pulseaudio | 2.1 | 2.1.x |
| pulseaudio / pulseaudio | 1.99.1 | 1.99.1.x |
| pulseaudio / pulseaudio | 1.0 | 1.0.x |
- http://advisories.mageia.org/MGASA-2014-0440.html
- http://lists.freedesktop.org/archives/pulseaudio-discuss/2014-May/020740.html
- http://seclists.org/oss-sec/2014/q2/429
- http://seclists.org/oss-sec/2014/q2/437
- http://secunia.com/advisories/60624
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:134
- http://www.securityfocus.com/bid/67814
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime