CVE-2008-0008

The padroproot function in PulseAudio 0.9.8, and a certain 0.9.9 build, does not check return values from 1 setresuid, 2 setreuid, 3 setuid, and 4 seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail via attacks such as...

CVE-2008-0008

The padroproot function in PulseAudio 0.9.8, and a certain 0.9.9 build, does not check return values from 1 setresuid, 2 setreuid, 3 setuid, and 4 seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail via attacks such as...

[SECURITY] [DSA 1476-1] New pulseaudio packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1476-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 27, 2008 http://www.debian.org/security/faq -...

pulseuadio privilege escalation

setuid result is not checked...

[ MDVSA-2008:027 ] - Updated pulseaudio packages fix local root vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:027 http://www.mandriva.com/security/ Package : pulseaudio Date : January 25, 2008 Affected: 2007.1, 2008.0 Problem Description: A programming flaw was found in Pulseaudio versions older than 0.9.9, by which...

Fedora 8 : pulseaudio-0.9.8-5.fc8 (2008-0963)

Wed Jan 23 2008 Lubomir Kundrak 0.9.8-5 - Fix CVE-2008-0008 security issue 425481 - Sun Jan 13 2008 Lubomir Kundrak 0.9.8-4.1 - Actually add content to pulseaudio-0.9.8-create-dot-pulse.patch - Make the Source0 tag point to URL instead of a local file - Drop the nochown patch; it's not applied at...

DSA-1476-1 pulseaudio - programming error

Bulletin has no description...

Fedora 7 : pulseaudio-0.9.6-2.fc7.1 (2008-0994)

Wed Jan 23 2008 Lubomir Kundrak 0.9.6-2.1 - Fix CVE-2008-0008 security issue 425481 - Tue May 29 2007 Pierre Ossman 0.9.6-2 - Add libatomicops-devel as a build requirement. - Tue May 29 2007 Pierre Ossman 0.9.6-1 - Upgrade to 0.9.6. Note that Tenable Network Security has extracted the preceding...

[SECURITY] Fedora 7 Update: pulseaudio-0.9.6-2.fc7.1

PulseAudio is a sound server for Linux and other Unix like operating systems. It is intended to be an improved drop-in replacement for the Enlightened Sound Daemon ESOUND...

[SECURITY] Fedora 8 Update: pulseaudio-0.9.8-5.fc8

PulseAudio is a sound server for Linux and other Unix like operating systems. It is intended to be an improved drop-in replacement for the Enlightened Sound Daemon ESOUND...

[SECURITY] Fedora 8 Update: xine-lib-1.1.9.1-1.fc8

This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of t...

Ubuntu 7.04 : pulseaudio vulnerability (USN-465-1)

Luigi Auriemma discovered multiple flaws in pulseaudio's network processing code. If an unauthenticated attacker sent specially crafted requests to the pulseaudio daemon, it would crash, resulting in a denial of service. Note that Tenable Network Security has extracted the preceding description...

openSUSE 10 Security Update : pulseaudio (pulseaudio-3637)

This update of pulseaudio fixes a denial-of-service bug that can be triggered remotely. CVE-2007-1804 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update pulseaudio-3637. The text description of...

DTSA-44-1 pulseaudio - remote DoS

Bulletin has no description...

USN-465-1: PulseAudio vulnerability

Luigi Auriemma discovered multiple flaws in pulseaudio's network processing code. If an unauthenticated attacker sent specially crafted requests to the pulseaudio daemon, it would crash, resulting in a denial of service...

PulseAudio sound server DoS

Multiple invalid assertusage, e.g. on empty request...

Pulseaudio 0.9.5 (rev 1437) termination

Luigi Auriemma Application: PulseAudio http://www.pulseaudio.org Versions: 0.9.5 svn 1437 Platforms: POSIX and Win32 Bugs: termination of the server through failed assert Exploitation: local and remote Date: 29 Mar 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...

Authentication flaw

PulseAudio 0.9.5 allows remote attackers to cause a denial of service daemon crash via 1 a PAPSTREAMDESCRIPTORLENGTH value of FRAMESIZEMAXALLOW sent on TCP port 9875, which triggers a p-export assertion failure in doread; 2 a PAPSTREAMDESCRIPTORLENGTH value of 0 sent on TCP port 9875, which...

DEBIAN-CVE-2007-1804

PulseAudio 0.9.5 allows remote attackers to cause a denial of service daemon crash via 1 a PAPSTREAMDESCRIPTORLENGTH value of FRAMESIZEMAXALLOW sent on TCP port 9875, which triggers a p-export assertion failure in doread; 2 a PAPSTREAMDESCRIPTORLENGTH value of 0 sent on TCP port 9875, which...

CVE-2007-1804

PulseAudio 0.9.5 allows remote attackers to cause a denial of service daemon crash via 1 a PAPSTREAMDESCRIPTORLENGTH value of FRAMESIZEMAXALLOW sent on TCP port 9875, which triggers a p-export assertion failure in doread; 2 a PAPSTREAMDESCRIPTORLENGTH value of 0 sent on TCP port 9875, which...