Oracle Linux 10 : ELSA-2026-61241-0: / pipewire (ELSA-2026-612410)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-612410 advisory. 1.4.11-1.1 - Fix CVE-2026-14324: limit RTSP Content-Length and check allocation in RAOP client Resolves: RHEL-249305 Tenable has extracted the preceding...

Oracle Linux 9 : ELSA-2026-61240-0: / pipewire (ELSA-2026-612400)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-612400 advisory. - Fix CVE-2026-14324: limit RTSP Content-Length in RAOP client Resolves: RHEL-249297 Tenable has extracted the preceding description block directly...

ALSA-2026:61241 Moderate: pipewire security update

PipeWire is a multimedia server for Linux and other Unix like operating systems. Security Fixes: pipewire: RAOP RTSP NULL Deref CVE-2026-14324 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages...

Important: pipewire

Issue Overview: RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return. CVE-2026-14324 Multiple unbounded alloca calls in the PulseAudio protocol server. CVE-2026-14330 A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker t...

OESA-2026-3116 pipewire security update

is a server and user space API to deal with multimedia pipelines,contains command line utilities. Security Fixes: RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return.CVE-2026-14324...

USN-8535-1: PipeWire vulnerabilities

It was discovered that PipeWire accepted unbounded Content-Length values in its RAOP module. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS. CVE-2026-14324 It was discovered that PipeWire performed multiple unbounded stack...

UBUNTU-CVE-2026-14324

RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return...

CVE-2026-14324 Pipewire: raop rtsp null deref

RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return...

CVE-2026-14324 Pipewire: raop rtsp null deref

RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return...