CVEvulnerability

CVE-2014-3970

2.9 LOW Published 2014-06-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-06-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.9 LOW — AV:A/AC:M/Au:N/C:N/I:N/A:P

Description

The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure and abort) via an empty UDP packet.

Affected configurations

• pulseaudio pulseaudio 1.0 • pulseaudio pulseaudio 1.1 • pulseaudio pulseaudio 1.99.1 • pulseaudio pulseaudio 1.99.2 • pulseaudio pulseaudio 2.0 • pulseaudio pulseaudio 2.1 • pulseaudio pulseaudio 3.0 • pulseaudio pulseaudio 4.0 • pulseaudio pulseaudio 5.0

References