CVE-2014-3970 The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure and abort) via an empt...
LowCVSS 2.9
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure and abort) via an empty UDP packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/pulseaudio(Debian:12) | < 5.0-3 | 5.0-3 |
| debian/pulseaudio(Debian:13) | < 5.0-3 | 5.0-3 |
| debian/pulseaudio(Debian:14) | < 5.0-3 | 5.0-3 |
| pulseaudio | = 1.0 | No fix listed |
| pulseaudio | = 1.1 | No fix listed |
| pulseaudio | = 1.99.1 | No fix listed |
| pulseaudio | = 1.99.2 | No fix listed |
| pulseaudio | = 2.0 | No fix listed |
| pulseaudio | = 2.1 | No fix listed |
| pulseaudio | = 3.0 | No fix listed |
| pulseaudio | = 4.0 | No fix listed |
| pulseaudio | = 5.0 | No fix listed |
References
- Debian Security Tracker CVE-2014-3970 vendor-advisory
- advisories.mageia.org
- [pulseaudio-discuss] 20140531 Remotely triggerable crash in module-rtp-recv exploit mailing-list
- [oss-security] 20140604 CVE request: PulseAudio crash due to empty UDP packet mailing-list
- [oss-security] 20140604 Re: CVE request: PulseAudio crash due to empty UDP packet mailing-list
- 60624 third-party-advisory
- MDVSA-2015:134 vendor-advisory
- 67814 vdb-entry