The pa_drop_root function in PulseAudio 0.9.8, and a certain 0.9.9 build, does not check return values from (1) setresuid, (2) setreuid, (3) setuid, and (4) seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail via attacks such as resource exhaustion.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade pulseaudio | Jul 30, 2024 | Jan 29, 2008 |
| Gentoo Linux | — | Upgrade media-sound/pulseaudio. | Oct 30, 2017 | Jan 28, 2008 |
| Suse | — | Upgrade libpulse0-x86Upgrade pulseaudio-module-zeroconfUpgrade system-user-pulseUpgrade libpulse0-32bitUpgrade libpulse-mainloop-glib0-32bitUpgrade pulseaudio-module-x11Upgrade libpulse-mainloop-glib0-x86Upgrade pulseaudio-utilsUpgrade pulseaudio-setupUpgrade pulseaudio-zsh-completionUpgrade pulseaudio-esound-compatUpgrade pulseaudio-langUpgrade pulseaudio-gdm-hooksUpgrade pulseaudioUpgrade pulseaudio-bash-completionUpgrade libpulse-browse0Upgrade libpulse-develUpgrade libpulse0Upgrade libpulse-mainloop-glib0 | Aug 9, 2024 | Jun 28, 2013 |
| Ubuntu | — | Upgrade pulseaudio | Nov 8, 2024 | Jan 29, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub