openSUSE: Security Advisory for pipewire (SUSE-SU-2023:3257-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for pipewire (SUSE-SU-2023:3097-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Incorrect Default Permissions

Ubuntu's pipewire-pulse is vulnerable to Incorrect Default Permissions. The vulnerability is caused due to Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set. This leads to compromising Confidentiality of the system...

CVE-2022-4964

A flaw was discovered in pipewire-pulse, where Snap allows microphone access even in the absence of a configured snap interface for audio recording. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria...

SUSE CVE-2022-4964

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set...

DEBIAN-CVE-2022-4964

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set...

CVE-2022-4964

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set...

Authentication flaw

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set...

CVE-2022-4964

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set...

CVE-2022-4964

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set...

CVE-2022-4964

CVE-2022-4964 concerns Ubuntu’s pipewire-pulse in snap, which grants microphone access even when the audio-record snap interface is not configured. The vulnerability is evaluated with a Local attacker, Low attack complexity, Low privileges required, and no user interaction, potentially exposing c...

CVE-2022-4964

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set...

pipewire Security Vulnerabilities

pipewire is pipewire open source an underlying multimedia framework for processing audio and video on Linux systems. A security vulnerability exists in pipewire that stems from the Ubuntu pipeline-pulse in snap granting microphone access when the snap interface for audio recording is not set...

CVE-2022-4964

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set...

PT-2024-11902 · Canonical +1 · Pipewire-Pulse +1

Name of the Vulnerable Software and Affected Versions: pipewire-pulse in Ubuntu snap affected versions not specified Description: The issue concerns the pipewire-pulse in Ubuntu snap, which grants microphone access even when the snap interface for audio-record is not set. This could potentially...

UBUNTU-CVE-2022-4964

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set...

SUSE SLED15: gstreamer-plugin-pipewire / libpipewire-0_3-0 / etc (SUSE-SU-2023:3257-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3257-1 advisory. This update for pipewire fixes the following security issues: - Fixed issue where an app which only has...

SUSE-SU-2023:3257-1 Security update for pipewire

This update for pipewire fixes the following security issues: - Fixed issue where an app which only has permission to access one stream can also access other streams bsc1213682. Bugfixes: - Fixed division by 0 and other issues with invalid values glfopipewire/pipewire2953 - Fixed an overflow...

SUSE-SU-2023:3256-1 Security update for pipewire

This update for pipewire fixes the following security issues: - Fixed issue where an app which only has permission to access one stream can also access other streams bsc1213682. Bugfixes: - Fixed division by 0 and other issues with invalid values glfopipewire/pipewire2953 - Fixed an overflow...

PT-2023-36246 · Pipewire · Pipewire

Name of the Vulnerable Software and Affected Versions: pipewire affected versions not specified Description: The issue allows an app with permission to access one stream to also access other streams. This is a security concern as it bypasses intended access controls. Additionally, there were fixe...