The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure and abort) via an empty UDP packet.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade pulseaudio | Jul 30, 2024 | Jun 11, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 31, 2014 |
| Suse | — | Upgrade pulseaudio-gdm-hooksUpgrade pulseaudio-module-bluetoothUpgrade pulseaudio-bash-completionUpgrade pulseaudio-module-lircUpgrade libpulse0Upgrade pulseaudio-langUpgrade libpulse-develUpgrade pulseaudioUpgrade pulseaudio-module-jackUpgrade pulseaudio-zsh-completionUpgrade pulseaudio-esound-compatUpgrade libpulse-mainloop-glib0-32bitUpgrade libpulse-mainloop-glib0-x86Upgrade libpulse0-x86Upgrade pulseaudio-utilsUpgrade libpulse0-32bitUpgrade pulseaudio-module-x11Upgrade pulseaudio-module-zeroconfUpgrade libpulse-mainloop-glib0Upgrade libpulse-browse0Upgrade pulseaudio-module-gconf | Dec 18, 2015 | Jun 11, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub