CVE-2014-3970

The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure and abort) via an empty UDP packet.

Score

CVSS 2.0 2.9 Low

Status

Modified - cve@mitre.org

Published

2014-06-11

Last modified

2024-08-06

Affected products

• Pulseaudio (Pulseaudio)

References

• http://advisories.mageia.org/MGASA-2014-0440.html
• http://lists.freedesktop.org/archives/pulseaudio-discuss/2014-May/020740.html
• http://seclists.org/oss-sec/2014/q2/429
• http://seclists.org/oss-sec/2014/q2/437
• http://secunia.com/advisories/60624
• http://www.mandriva.com/security/advisories?name=MDVSA-2015:134
• http://www.securityfocus.com/bid/67814