The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure and abort) via an empty UDP packet.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pulseaudio | Pulseaudio | 1.0 (including) | 1.0 (including) |
| Pulseaudio | Pulseaudio | 1.1 (including) | 1.1 (including) |
| Pulseaudio | Pulseaudio | 1.99.1 (including) | 1.99.1 (including) |
| Pulseaudio | Pulseaudio | 1.99.2 (including) | 1.99.2 (including) |
| Pulseaudio | Pulseaudio | 2.0 (including) | 2.0 (including) |
| Pulseaudio | Pulseaudio | 2.1 (including) | 2.1 (including) |
| Pulseaudio | Pulseaudio | 3.0 (including) | 3.0 (including) |
| Pulseaudio | Pulseaudio | 4.0 (including) | 4.0 (including) |
| Pulseaudio | Pulseaudio | 5.0 (including) | 5.0 (including) |
| Pulseaudio | Ubuntu | artful | * |
| Pulseaudio | Ubuntu | lucid | * |
| Pulseaudio | Ubuntu | precise | * |
| Pulseaudio | Ubuntu | saucy | * |
| Pulseaudio | Ubuntu | trusty | * |
| Pulseaudio | Ubuntu | utopic | * |
| Pulseaudio | Ubuntu | vivid | * |
| Pulseaudio | Ubuntu | vivid/stable-phone-overlay | * |
| Pulseaudio | Ubuntu | wily | * |
| Pulseaudio | Ubuntu | yakkety | * |
| Pulseaudio | Ubuntu | zesty | * |