CVE-2008-0008

2008-01-2900:00:00

ubuntu.com

0.0004 Low

EPSS

Percentile

9.7%

JSON

The pa_drop_root function in PulseAudio 0.9.8, and a certain 0.9.9 build,
does not check return values from (1) setresuid, (2) setreuid, (3) setuid,
and (4) seteuid calls when attempting to drop privileges, which might allow
local users to gain privileges by causing those calls to fail via attacks
such as resource exhaustion.

Bugs

Notes

Author	Note
jdstrand	not possible to exploit in default installation. In fact, need an LSM to fail the call and then not protect the binary properly, so this is almost a non-issue on Ubuntu patched prepared

OSVersionArchitecturePackageVersionFilename
ubuntu7.04noarchpulseaudio< 0.9.5-5ubuntu4.2UNKNOWN
ubuntu7.10noarchpulseaudio< 0.9.6-1ubuntu2.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	7.04	noarch	pulseaudio	< 0.9.5-5ubuntu4.2	UNKNOWN
ubuntu	7.10	noarch	pulseaudio	< 0.9.6-1ubuntu2.1	UNKNOWN

References

launchpad.net/bugs/cve/CVE-2008-0008

nvd.nist.gov/vuln/detail/CVE-2008-0008

security-tracker.debian.org/tracker/CVE-2008-0008

ubuntu.com/security/notices/USN-573-1

www.cve.org/CVERecord?id=CVE-2008-0008

0.0004 Low

EPSS

Percentile

9.7%

JSON

Related for UB:CVE-2008-0008