The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure and abort) via an empty UDP packet.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade pulseaudio | Jul 30, 2024 | Jun 11, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 31, 2014 |
| Suse | — | Upgrade pulseaudio-module-jackUpgrade pulseaudioUpgrade pulseaudio-zsh-completionUpgrade libpulse-develUpgrade pulseaudio-gdm-hooksUpgrade pulseaudio-bash-completionUpgrade libpulse-mainloop-glib0-x86Upgrade pulseaudio-esound-compatUpgrade pulseaudio-langUpgrade pulseaudio-module-lircUpgrade libpulse0Upgrade libpulse-mainloop-glib0-32bitUpgrade pulseaudio-module-bluetoothUpgrade pulseaudio-module-x11Upgrade pulseaudio-module-gconfUpgrade libpulse0-32bitUpgrade libpulse0-x86Upgrade libpulse-mainloop-glib0Upgrade pulseaudio-utilsUpgrade pulseaudio-module-zeroconfUpgrade libpulse-browse0 | Dec 18, 2015 | Jun 11, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub