PU
Vendor
Pulseaudio
7
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-11586 | PU Pulseaudio Pulseaudio | 4.0 | Nov 23 | Ubuntu's implementation of pulseaudio can be crashed by a malicious program if a bluetooth headset is connected |
| CVE-2020-11931 | PU Pulseaudio Pulseaudio | 3.3 | May 15 | An Ubuntu-specific modification to Pulseaudio to provide security mediation for Snap-packaged applications was found to have a bypass of intended access restriction for snaps… |
| CVE-2014-3970 | PU Pulseaudio Pulseaudio | – | Jun 11 | The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure… |
| CVE-2009-1299 | PU Pulseaudio Pulseaudio | – | Mar 18 | The pa_make_secure_dir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack… |
| CVE-2009-1894 | PU Pulseaudio Pulseaudio | – | Jul 17 | Race condition in PulseAudio 0.9.9, 0.9.10, and 0.9.14 allows local users to gain privileges via vectors involving creation of a hard link, related to the application setting… |
| CVE-2008-0008 | PU Pulseaudio Pulseaudio | – | Jan 29 | The pa_drop_root function in PulseAudio 0.9.8, and a certain 0.9.9 build, does not check return values from (1) setresuid, (2) setreuid, (3) setuid, and (4) seteuid calls when… |
| CVE-2007-1804 | PU Pulseaudio Pulseaudio | – | Apr 2 | PulseAudio 0.9.5 allows remote attackers to cause a denial of service (daemon crash) via (1) a PA_PSTREAM_DESCRIPTOR_LENGTH value of FRAME_SIZE_MAX_ALLOW sent on TCP port 9875,… |