Detections
Analytics
Mandriva Linux Security Advisory : pulseaudio (MDVSA-2015:134)
low Nessus Plugin ID 82387
Language:
Synopsis
The remote Mandriva Linux host is missing one or more security updates.Description
Updated pulseaudio package fixes RTP remote crash vulnerability :PulseAudio versions shipped in mbs2 were vulnerable to a remote RTP attack which could crash the PulseAudio server simply by sending an empty UDP packet.
Additionally, the version of PulseAudio shipped in mbs2 was a pre-release version of PulseAudio v5 and has been updated to the official final version.
Solution
Update the affected packages.See Also
Plugin Details
Severity: Low
ID: 82387
File Name: mandriva_MDVSA-2015-134.nasl
Version: 1.4
Type: local
Family: Mandriva Local Security Checks
Published: 3/30/2015
Updated: 1/14/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.4
CVSS v2
Risk Factor: Low
Base Score: 2.9
Vector: CVSS2#AV:A/AC:M/Au:N/C:N/I:N/A:P
Vulnerability Information
CPE: p-cpe:/a:mandriva:linux:pulseaudio-module-bluetooth, p-cpe:/a:mandriva:linux:pulseaudio-module-x11, p-cpe:/a:mandriva:linux:lib64pulseglib20, p-cpe:/a:mandriva:linux:pulseaudio-client-config, p-cpe:/a:mandriva:linux:pulseaudio-utils, p-cpe:/a:mandriva:linux:pulseaudio-module-jack, p-cpe:/a:mandriva:linux:pulseaudio-esound-compat, p-cpe:/a:mandriva:linux:pulseaudio-module-equalizer, p-cpe:/a:mandriva:linux:pulseaudio-module-xen, p-cpe:/a:mandriva:linux:lib64pulseaudio0, cpe:/o:mandriva:business_server:2, p-cpe:/a:mandriva:linux:lib64pulseaudio-devel, p-cpe:/a:mandriva:linux:lib64pulsecommon5.0, p-cpe:/a:mandriva:linux:pulseaudio, p-cpe:/a:mandriva:linux:pulseaudio-module-zeroconf, p-cpe:/a:mandriva:linux:pulseaudio-module-lirc, p-cpe:/a:mandriva:linux:lib64pulsecore5.0, p-cpe:/a:mandriva:linux:pulseaudio-module-gconf
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list
Patch Publication Date: 3/29/2015
Reference Information
CVE: CVE-2014-3970
MDVSA: 2015:134