Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

Ubuntu: Security Advisory (USN-4640-1)

🗓️ 24 Nov 2020 00:00:00Reported by Copyright (C) 2020 Greenbone AGType 
openvas
 openvas🔗 plugins.openvas.org👁 19 Views

The 'pulseaudio' package in Ubuntu 16.04 LTS is missing an essential security update (USN-4640-1)

Related
Refs
Code
ReporterTitlePublishedViews
Family
circl
Circl		CVE-2020-16123
4 Dec 202002:26
–circl
cnnvd
CNNVD		PulseAudio Competitive Conditions Issue Vulnerability
24 Nov 202000:00
–cnnvd
cve
CVE		CVE-2020-16123
3 Dec 202023:15
–cve
cvelist
Cvelist		CVE-2020-16123 Bypass of snapd pulseaudio restrictions
3 Dec 202023:15
–cvelist
debiancve
Debian CVE		CVE-2020-16123
3 Dec 202023:15
–debiancve
euvd
EUVD		EUVD-2020-8089
7 Oct 202500:30
–euvd
nvd
NVD		CVE-2020-16123
4 Dec 202000:15
–nvd
osv
OSV		CVE-2020-16123
4 Dec 202000:15
–osv
osv
OSV		UBUNTU-CVE-2020-16123
23 Nov 202017:00
–osv
osv
OSV		USN-4640-1 pulseaudio vulnerability
23 Nov 202016:03
–osv
Rows per page
# SPDX-FileCopyrightText: 2020 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.844724");
  script_cve_id("CVE-2020-16123");
  script_tag(name:"creation_date", value:"2020-11-24 04:00:40 +0000 (Tue, 24 Nov 2020)");
  script_version("2024-02-02T05:06:07+0000");
  script_tag(name:"last_modification", value:"2024-02-02 05:06:07 +0000 (Fri, 02 Feb 2024)");
  script_tag(name:"cvss_base", value:"2.1");
  script_tag(name:"cvss_base_vector", value:"AV:L/AC:L/Au:N/C:P/I:N/A:N");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2020-12-10 14:52:17 +0000 (Thu, 10 Dec 2020)");

  script_name("Ubuntu: Security Advisory (USN-4640-1)");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2020 Greenbone AG");
  script_family("Ubuntu Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/ubuntu_linux", "ssh/login/packages", re:"ssh/login/release=UBUNTU(16\.04\ LTS|18\.04\ LTS|20\.04\ LTS|20\.10)");

  script_xref(name:"Advisory-ID", value:"USN-4640-1");
  script_xref(name:"URL", value:"https://ubuntu.com/security/notices/USN-4640-1");

  script_tag(name:"summary", value:"The remote host is missing an update for the 'pulseaudio' package(s) announced via the USN-4640-1 advisory.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");

  script_tag(name:"insight", value:"James Henstridge discovered that an Ubuntu-specific patch caused
PulseAudio to incorrectly handle snap client connections. An attacker
could possibly use this to expose sensitive information.");

  script_tag(name:"affected", value:"'pulseaudio' package(s) on Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 20.10.");

  script_tag(name:"solution", value:"Please install the updated package(s).");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"package");

  exit(0);
}

include("revisions-lib.inc");
include("pkg-lib-deb.inc");

release = dpkg_get_ssh_release();
if(!release)
  exit(0);

res = "";
report = "";

if(release == "UBUNTU16.04 LTS") {

  if(!isnull(res = isdpkgvuln(pkg:"libpulse-mainloop-glib0", ver:"1:8.0-0ubuntu3.15", rls:"UBUNTU16.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"libpulse0", ver:"1:8.0-0ubuntu3.15", rls:"UBUNTU16.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"libpulsedsp", ver:"1:8.0-0ubuntu3.15", rls:"UBUNTU16.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio", ver:"1:8.0-0ubuntu3.15", rls:"UBUNTU16.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-esound-compat", ver:"1:8.0-0ubuntu3.15", rls:"UBUNTU16.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-bluetooth", ver:"1:8.0-0ubuntu3.15", rls:"UBUNTU16.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-droid", ver:"1:8.0-0ubuntu3.15", rls:"UBUNTU16.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-gconf", ver:"1:8.0-0ubuntu3.15", rls:"UBUNTU16.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-jack", ver:"1:8.0-0ubuntu3.15", rls:"UBUNTU16.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-lirc", ver:"1:8.0-0ubuntu3.15", rls:"UBUNTU16.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-raop", ver:"1:8.0-0ubuntu3.15", rls:"UBUNTU16.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-trust-store", ver:"1:8.0-0ubuntu3.15", rls:"UBUNTU16.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-x11", ver:"1:8.0-0ubuntu3.15", rls:"UBUNTU16.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-zeroconf", ver:"1:8.0-0ubuntu3.15", rls:"UBUNTU16.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-utils", ver:"1:8.0-0ubuntu3.15", rls:"UBUNTU16.04 LTS"))) {
    report += res;
  }

  if(report != "") {
    security_message(data:report);
  } else if(__pkg_match) {
    exit(99);
  }
  exit(0);
}

if(release == "UBUNTU18.04 LTS") {

  if(!isnull(res = isdpkgvuln(pkg:"libpulse-mainloop-glib0", ver:"1:11.1-1ubuntu7.11", rls:"UBUNTU18.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"libpulse0", ver:"1:11.1-1ubuntu7.11", rls:"UBUNTU18.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"libpulsedsp", ver:"1:11.1-1ubuntu7.11", rls:"UBUNTU18.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio", ver:"1:11.1-1ubuntu7.11", rls:"UBUNTU18.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-equalizer", ver:"1:11.1-1ubuntu7.11", rls:"UBUNTU18.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-esound-compat", ver:"1:11.1-1ubuntu7.11", rls:"UBUNTU18.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-bluetooth", ver:"1:11.1-1ubuntu7.11", rls:"UBUNTU18.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-gconf", ver:"1:11.1-1ubuntu7.11", rls:"UBUNTU18.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-jack", ver:"1:11.1-1ubuntu7.11", rls:"UBUNTU18.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-lirc", ver:"1:11.1-1ubuntu7.11", rls:"UBUNTU18.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-raop", ver:"1:11.1-1ubuntu7.11", rls:"UBUNTU18.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-zeroconf", ver:"1:11.1-1ubuntu7.11", rls:"UBUNTU18.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-utils", ver:"1:11.1-1ubuntu7.11", rls:"UBUNTU18.04 LTS"))) {
    report += res;
  }

  if(report != "") {
    security_message(data:report);
  } else if(__pkg_match) {
    exit(99);
  }
  exit(0);
}

if(release == "UBUNTU20.04 LTS") {

  if(!isnull(res = isdpkgvuln(pkg:"libpulse-mainloop-glib0", ver:"1:13.99.1-1ubuntu3.8", rls:"UBUNTU20.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"libpulse0", ver:"1:13.99.1-1ubuntu3.8", rls:"UBUNTU20.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"libpulsedsp", ver:"1:13.99.1-1ubuntu3.8", rls:"UBUNTU20.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio", ver:"1:13.99.1-1ubuntu3.8", rls:"UBUNTU20.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-equalizer", ver:"1:13.99.1-1ubuntu3.8", rls:"UBUNTU20.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-bluetooth", ver:"1:13.99.1-1ubuntu3.8", rls:"UBUNTU20.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-gsettings", ver:"1:13.99.1-1ubuntu3.8", rls:"UBUNTU20.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-jack", ver:"1:13.99.1-1ubuntu3.8", rls:"UBUNTU20.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-lirc", ver:"1:13.99.1-1ubuntu3.8", rls:"UBUNTU20.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-raop", ver:"1:13.99.1-1ubuntu3.8", rls:"UBUNTU20.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-zeroconf", ver:"1:13.99.1-1ubuntu3.8", rls:"UBUNTU20.04 LTS"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-utils", ver:"1:13.99.1-1ubuntu3.8", rls:"UBUNTU20.04 LTS"))) {
    report += res;
  }

  if(report != "") {
    security_message(data:report);
  } else if(__pkg_match) {
    exit(99);
  }
  exit(0);
}

if(release == "UBUNTU20.10") {

  if(!isnull(res = isdpkgvuln(pkg:"libpulse-mainloop-glib0", ver:"1:13.99.2-1ubuntu2.1", rls:"UBUNTU20.10"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"libpulse0", ver:"1:13.99.2-1ubuntu2.1", rls:"UBUNTU20.10"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"libpulsedsp", ver:"1:13.99.2-1ubuntu2.1", rls:"UBUNTU20.10"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio", ver:"1:13.99.2-1ubuntu2.1", rls:"UBUNTU20.10"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-equalizer", ver:"1:13.99.2-1ubuntu2.1", rls:"UBUNTU20.10"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-bluetooth", ver:"1:13.99.2-1ubuntu2.1", rls:"UBUNTU20.10"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-gsettings", ver:"1:13.99.2-1ubuntu2.1", rls:"UBUNTU20.10"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-jack", ver:"1:13.99.2-1ubuntu2.1", rls:"UBUNTU20.10"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-lirc", ver:"1:13.99.2-1ubuntu2.1", rls:"UBUNTU20.10"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-raop", ver:"1:13.99.2-1ubuntu2.1", rls:"UBUNTU20.10"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-module-zeroconf", ver:"1:13.99.2-1ubuntu2.1", rls:"UBUNTU20.10"))) {
    report += res;
  }

  if(!isnull(res = isdpkgvuln(pkg:"pulseaudio-utils", ver:"1:13.99.2-1ubuntu2.1", rls:"UBUNTU20.10"))) {
    report += res;
  }

  if(report != "") {
    security_message(data:report);
  } else if(__pkg_match) {
    exit(99);
  }
  exit(0);
}

exit(0);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
02 Feb 2024 00:00Current
7.1High risk
Vulners AI Score7.1
CVSS 22.1
CVSS 3.14.4 - 4.7
EPSS0.00318
ubuntusecurity advisoryusn-4640-1pulseaudiopatchvulnerabilityupdatesensitive informationpackageubuntu 16.04
19