PulseAudio DoS

Crash on empty UDP packet...

Mandriva Linux Security Advisory : pulseaudio (MDVSA-2015:134)

Updated pulseaudio package fixes RTP remote crash vulnerability : PulseAudio versions shipped in mbs2 were vulnerable to a remote RTP attack which could crash the PulseAudio server simply by sending an empty UDP packet. Additionally, the version of PulseAudio shipped in mbs2 was a pre-release...

Updated pulseaudio package fixes RTP remote crash vulnerability

PulseAudio versions shipped in Mageia 3 and 4 were vulnerable to a remote RTP attack which could crash the PulseAudio server simply by sending an empty UDP packet. Additionally, the version of PulseAudio shipped in Mageia 4 was a pre-release version of PulseAudio v5 and has been updated to the...

MGASA-2014-0440 Updated pulseaudio package fixes RTP remote crash vulnerability

PulseAudio versions shipped in Mageia 3 and 4 were vulnerable to a remote RTP attack which could crash the PulseAudio server simply by sending an empty UDP packet. Additionally, the version of PulseAudio shipped in Mageia 4 was a pre-release version of PulseAudio v5 and has been updated to the...

SuSE 11.3 Security Update : pulseaudio (SAT Patch Number 9568)

The following security issue is fixed in this update : - Fixed a remote denial of service attack in module-rtp-recv. CVE-2014-3970 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

openSUSE Security Update : pulseaudio (openSUSE-2014-477)

This update fixes the following security issue: bnc881524 CVE-2014-3970 - Denial of service in module-rtp-recv %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-477. The text...

openSUSE Security Update : openSUSE-2014- (openSUSE-2014--1)

This update fixes the following security issue: bnc881524 CVE-2014-3970 - Denial of service in module-rtp-recv %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2014/08/08. C Tenable Network Security, Inc. The...

Fedora Update for pulseaudio FEDORA-2014-8183

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: pulseaudio-5.0-7.fc20

PulseAudio is a sound server for Linux and other Unix like operating systems. It is intended to be an improved drop-in replacement for the Enlightened Sound Daemon ESOUND...

[SECURITY] Fedora 20 Update: qmmp-0.7.7-1.fc20.1

This program is an audio-player, written with help of Qt library. The user interface is similar to winamp or xmms. Main opportunities: Winamp and xmms skins support plugins support Ogg Vorbis support native FLAC support Musepack support WavePack support ModPlug support PCM WAVE support CD Audio...

[SECURITY] Fedora 20 Update: paprefs-0.9.10-7.fc20

PulseAudio Preferences paprefs is a simple GTK based configuration dialog for the PulseAudio sound server...

Fedora 20 : qt-mobility-1.2.2-0.16.20140317git169da60c.fc20 / audacious-plugins-3.4.3-2.fc20 / etc (2014-8183)

Rebase current post-4.0 snapshot to 5.0 release, see also: http://www.freedesktop.org/wiki/Software/PulseAudio/Notes/5.0/ This update restores compatibility with pulseaudio upstream ABI, and includes rebuilds of affected fedora packages. Note that Tenable Network Security has extracted the...

PulseAudio 0.9.5 Assert() Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23240/info PulseAudio is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to consume excessive system resources until the software becomes unresponsive to further calls,...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:0199-1)

java-170-openjdk was updated to icedtea-2.3.4 fixing bugs and also severe security issues : - Security fixes - S8004933, CVE-2012-3174: Improve MethodHandle interaction with libraries - S8006017, CVE-2013-0422: Improve lookup resolutions - S8006125: Update MethodHandles library interactions - Bug...

DEBIAN-CVE-2014-3970

The partprecv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service assertion failure and abort via an empty UDP packet...

CVE-2014-3970

The partprecv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service assertion failure and abort via an empty UDP packet...

CVE-2014-3970

The partprecv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service assertion failure and abort via an empty UDP packet...

Design/Logic Flaw

The partprecv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service assertion failure and abort via an empty UDP packet...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. The partprecv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service assertion failure and abort via an empty UDP packet...

CVE-2014-3970

The partprecv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service assertion failure and abort via an empty UDP packet...