CVE-2014-3970

Name of the Vulnerable Software and Affected Versions PulseAudio versions 5.0 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in an assertion failure and abort, via an empty UDP packet. This is due to a problem in the pa rtp recv function in the module-rtp-recv module.

Recommendations For PulseAudio versions 5.0 and earlier, consider disabling the pa rtp recv function as a temporary workaround until a patch is available. Restrict access to the module-rtp-recv module to minimize the risk of exploitation. Avoid using empty UDP packets in the affected API endpoint until the issue is resolved.