The pa_drop_root function in PulseAudio 0.9.8, and a certain 0.9.9 build, does not check return values from (1) setresuid, (2) setreuid, (3) setuid, and (4) seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail via attacks such as resource exhaustion.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade pulseaudio | Jul 30, 2024 | Jan 29, 2008 |
| Gentoo Linux | — | Upgrade media-sound/pulseaudio. | Oct 30, 2017 | Jan 28, 2008 |
| Suse | — | Upgrade pulseaudio-utilsUpgrade pulseaudio-gdm-hooksUpgrade pulseaudio-zsh-completionUpgrade libpulse-develUpgrade pulseaudio-bash-completionUpgrade libpulse0Upgrade libpulse-mainloop-glib0Upgrade pulseaudio-langUpgrade pulseaudioUpgrade pulseaudio-setupUpgrade pulseaudio-esound-compatUpgrade libpulse-browse0Upgrade libpulse-mainloop-glib0-x86Upgrade libpulse0-x86Upgrade pulseaudio-module-x11Upgrade libpulse-mainloop-glib0-32bitUpgrade system-user-pulseUpgrade pulseaudio-module-zeroconfUpgrade libpulse0-32bit | Aug 9, 2024 | Jun 28, 2013 |
| Ubuntu | — | Upgrade pulseaudio | Nov 8, 2024 | Jan 29, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub