PU
Product
Pulseaudio
7
CVEs
0
On KEV
4.0
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 1
Watch
Add Pulseaudio to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-11586 | 4.0 | Nov 23 | Ubuntu's implementation of pulseaudio can be crashed by a malicious program if a bluetooth headset is connected Affected: All versions, or not specified |
| CVE-2020-11931 | 3.3 | May 15 | An Ubuntu-specific modification to Pulseaudio to provide security mediation for Snap-packaged applications was found to have a bypass of intended access restriction for snaps… Affected: through 1.8.0 |
| CVE-2014-3970 | – | Jun 11 | The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure… Affected: 1.0; 1.1; 1.99.1; 1.99.2; 2.0; 2.1; +3 more |
| CVE-2009-1299 | – | Mar 18 | The pa_make_secure_dir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack… Affected: 0.9.10; 0.9.19 |
| CVE-2009-1894 | – | Jul 17 | Race condition in PulseAudio 0.9.9, 0.9.10, and 0.9.14 allows local users to gain privileges via vectors involving creation of a hard link, related to the application setting… Affected: 0.9.9; 0.9.10; 0.9.14 |
| CVE-2008-0008 | – | Jan 29 | The pa_drop_root function in PulseAudio 0.9.8, and a certain 0.9.9 build, does not check return values from (1) setresuid, (2) setreuid, (3) setuid, and (4) seteuid calls when… Affected: 0.9.6; 0.9.8 |
| CVE-2007-1804 | – | Apr 2 | PulseAudio 0.9.5 allows remote attackers to cause a denial of service (daemon crash) via (1) a PA_PSTREAM_DESCRIPTOR_LENGTH value of FRAME_SIZE_MAX_ALLOW sent on TCP port 9875,… Affected: 0.9.5 |
Showing 7