« Volver al listado

CVE-2014-3970

Estado: ModificadaBaja (2.9)—

The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure and abort) via an empty UDP packet.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Pulseaudio — Pulseaudio

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-3970",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.9,
          "accessVector": "ADJACENT_NETWORK",
          "vectorString": "AV:A/AC:M/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 5.5,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-06-11T14:55:09.423",
  "references": [
    {
      "url": "http://advisories.mageia.org/MGASA-2014-0440.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://lists.freedesktop.org/archives/pulseaudio-discuss/2014-May/020740.html",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seclists.org/oss-sec/2014/q2/429",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seclists.org/oss-sec/2014/q2/437",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/60624",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:134",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/67814",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://advisories.mageia.org/MGASA-2014-0440.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.freedesktop.org/archives/pulseaudio-discuss/2014-May/020740.html",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://seclists.org/oss-sec/2014/q2/429",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://seclists.org/oss-sec/2014/q2/437",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/60624",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:134",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/67814",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure and abort) via an empty UDP packet."
    },
    {
      "lang": "es",
      "value": "La función pa_rtp_recv en modules/rtp/rtp.c en el módulo module-rtp-recv en PulseAudio 5.0 y anteriores permite a atacantes remotos causar una denegación de servicio (fallo de aserción y abortar) a través de un paquete UDP vacío."
    }
  ],
  "lastModified": "2026-06-17T00:09:13.430",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:pulseaudio:pulseaudio:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6BFDEE3D-44CD-43E8-92C8-953EFDB22761"
            },
            {
              "criteria": "cpe:2.3:a:pulseaudio:pulseaudio:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F596B154-DABA-481F-9CB2-799D3AB142B0"
            },
            {
              "criteria": "cpe:2.3:a:pulseaudio:pulseaudio:1.99.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "733CA32D-2662-4158-8458-B0D6C9DC14BD"
            },
            {
              "criteria": "cpe:2.3:a:pulseaudio:pulseaudio:1.99.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB11D799-A9C3-4F27-A58C-818A130D1DAE"
            },
            {
              "criteria": "cpe:2.3:a:pulseaudio:pulseaudio:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CA2B12D8-F21A-41F3-91E2-9AE271D2C692"
            },
            {
              "criteria": "cpe:2.3:a:pulseaudio:pulseaudio:2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "836FD10A-2A09-458A-B904-DAB5D5D78D52"
            },
            {
              "criteria": "cpe:2.3:a:pulseaudio:pulseaudio:3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D664D404-5476-46E7-8EC9-9F4BAD4AB38D"
            },
            {
              "criteria": "cpe:2.3:a:pulseaudio:pulseaudio:4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7C45B6F5-CBFB-417C-8ADE-F9DA5D7F535E"
            },
            {
              "criteria": "cpe:2.3:a:pulseaudio:pulseaudio:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB2BA4B8-5EF9-4DDB-B68F-A7941D001E13"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}