Back to Database
Status published
Low
CVE-2014-3970
The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in...
Vulnerability Description
The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure and abort) via an empty UDP packet.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-3970
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/bid/67814
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:134
- http://seclists.org/oss-sec/2014/q2/429
- http://lists.freedesktop.org/archives/pulseaudio-discuss/2014-May/020740.html
- http://advisories.mageia.org/MGASA-2014-0440.html
- http://secunia.com/advisories/60624
- http://seclists.org/oss-sec/2014/q2/437
More from pulseaudio
View All →CVE-2009-1894
Race condition in PulseAudio 0.9.9, 0.9.10, and 0.9.14 allows local...
High
7.2
CVE-2009-1299
The pa_make_secure_dir function in core-util.c in PulseAudio 0.9.10 and 0.9.19...
Medium
6.9
CVE-2008-0008
The pa_drop_root function in PulseAudio 0.9.8, and a certain 0.9.9...
High
7.2
CVE-2007-1804
PulseAudio 0.9.5 allows remote attackers to cause a denial of...
High
7.8
Affected Vendor
pulseaudio
View all reports →Affected Software
pulseaudio
Vulnerable Versions:
1.0, 1.1, 1.99.1, 1.99.2, 2.0, 2.1, 3.0, 4.0, 5.0
Timeline
Official Publish:
June 11th, 2014
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.