CVE-2014-3970

Description

The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure and abort) via an empty UDP packet.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-3903

http://www.securityfocus.com/bid/67814

http://www.mandriva.com/security/advisories?name=MDVSA-2015:134

http://secunia.com/advisories/60624

http://seclists.org/oss-sec/2014/q2/437

http://seclists.org/oss-sec/2014/q2/429

http://lists.freedesktop.org/archives/pulseaudio-discuss/2014-May/020740.html

http://advisories.mageia.org/MGASA-2014-0440.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS