Lucene search

K
nvd[email protected]NVD:CVE-2014-3970
HistoryJun 11, 2014 - 2:55 p.m.

CVE-2014-3970

2014-06-1114:55:09
web.nvd.nist.gov

2.9 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:N/I:N/A:P

6.3 Medium

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.2%

The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure and abort) via an empty UDP packet.

Affected configurations

NVD
Node
pulseaudiopulseaudioMatch1.0
OR
pulseaudiopulseaudioMatch1.1
OR
pulseaudiopulseaudioMatch1.99.1
OR
pulseaudiopulseaudioMatch1.99.2
OR
pulseaudiopulseaudioMatch2.0
OR
pulseaudiopulseaudioMatch2.1
OR
pulseaudiopulseaudioMatch3.0
OR
pulseaudiopulseaudioMatch4.0
OR
pulseaudiopulseaudioMatch5.0

2.9 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:N/I:N/A:P

6.3 Medium

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.2%