CVE catalog

CVE-2014-3970

pulseaudio: CVE-2014-3970

Severity: Medium
Published: Jun 11, 2014, 2:55:09 PM UTC
Source: [NVD] · [CVE record]
EPSS: 1.46% · Oct 25, 2026

The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure and abort) via an empty UDP packet.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	pulseaudio	sid	`17.0+dfsg1-3`	fixed
Debian	pulseaudio	forky	`17.0+dfsg1-3`	fixed
Debian	pulseaudio	trixie	`17.0+dfsg1-2`	fixed
Debian	pulseaudio	bookworm	`16.1+dfsg1-2`	fixed
Opensuse	pulseaudio	tumbleweed	`9.0-2.3`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	pulseaudio	source	sid	`5.0-3`	low	Not reported	Not reported
Debian	pulseaudio	source	forky	`5.0-3`	low	Not reported	Not reported
Debian	pulseaudio	source	trixie	`5.0-3`	low	Not reported	Not reported
Debian	pulseaudio	source	bookworm	`5.0-3`	low	Not reported	Not reported
Opensuse	pulseaudio	rpm	tumbleweed	`9.0-2.3`	Not reported	OPENSUSE-SU-2024:10241-1	Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

[libpulse0]Unknown
Source package: [pulseaudio]
Details (1)
- 17.0-7.5 · x86_64 · tumbleweed
  Unknown · Fixed: 9.0-2.3
  Version impact unknown
  dsa · pulseaudio · opensuse · tumbleweed
[libpulse0-32bit]Unknown
Source package: [pulseaudio]
Details (1)
- 17.0-7.5 · x86_64 · tumbleweed
  Unknown · Fixed: 9.0-2.3
  Version impact unknown
  dsa · pulseaudio · opensuse · tumbleweed
[libpulse-devel]Unknown
Source package: [pulseaudio]
Details (1)
- 17.0-7.5 · x86_64 · tumbleweed
  Unknown · Fixed: 9.0-2.3
  Version impact unknown
  dsa · pulseaudio · opensuse · tumbleweed
[libpulse-devel-32bit]Unknown
Source package: [pulseaudio]
Details (1)
- 17.0-7.5 · x86_64 · tumbleweed
  Unknown · Fixed: 9.0-2.3
  Version impact unknown
  dsa · pulseaudio · opensuse · tumbleweed
[libpulse-mainloop-glib0]Unknown
Source package: [pulseaudio]
Details (1)
- 17.0-7.5 · x86_64 · tumbleweed
  Unknown · Fixed: 9.0-2.3
  Version impact unknown
  dsa · pulseaudio · opensuse · tumbleweed
[libpulse-mainloop-glib0-32bit]Unknown
Source package: [pulseaudio]
Details (1)
- 17.0-7.5 · x86_64 · tumbleweed
  Unknown · Fixed: 9.0-2.3
  Version impact unknown
  dsa · pulseaudio · opensuse · tumbleweed
[pulseaudio-bash-completion]Unknown
Source package: [pulseaudio]
Details (1)
- 17.0-7.5 · x86_64 · tumbleweed
  Unknown · Fixed: 9.0-2.3
  Version impact unknown
  dsa · pulseaudio · opensuse · tumbleweed
[pulseaudio-lang]Unknown
Source package: [pulseaudio]
Details (1)
- 17.0-7.5 · noarch · tumbleweed
  Unknown · Fixed: 9.0-2.3
  Version impact unknown
  dsa · pulseaudio · opensuse · tumbleweed
[pulseaudio-module-bluetooth]Unknown
Source package: [pulseaudio]
Details (1)
- 17.0-7.5 · x86_64 · tumbleweed
  Unknown · Fixed: 9.0-2.3
  Version impact unknown
  dsa · pulseaudio · opensuse · tumbleweed
[pulseaudio-module-gsettings]Unknown
Source package: [pulseaudio]
Details (1)
- 17.0-7.5 · x86_64 · tumbleweed
  Unknown · Fixed: 9.0-2.3
  Version impact unknown
  dsa · pulseaudio · opensuse · tumbleweed
[pulseaudio-module-jack]Unknown
Source package: [pulseaudio]
Details (1)
- 17.0-7.5 · x86_64 · tumbleweed
  Unknown · Fixed: 9.0-2.3
  Version impact unknown
  dsa · pulseaudio · opensuse · tumbleweed
[pulseaudio-module-lirc]Unknown
Source package: [pulseaudio]
Details (1)
- 17.0-7.5 · x86_64 · tumbleweed
  Unknown · Fixed: 9.0-2.3
  Version impact unknown
  dsa · pulseaudio · opensuse · tumbleweed
[pulseaudio-module-x11]Unknown
Source package: [pulseaudio]
Details (1)
- 17.0-7.5 · x86_64 · tumbleweed
  Unknown · Fixed: 9.0-2.3
  Version impact unknown
  dsa · pulseaudio · opensuse · tumbleweed
[pulseaudio-module-zeroconf]Unknown
Source package: [pulseaudio]
Details (1)
- 17.0-7.5 · x86_64 · tumbleweed
  Unknown · Fixed: 9.0-2.3
  Version impact unknown
  dsa · pulseaudio · opensuse · tumbleweed
[pulseaudio-setup]Unknown
Source package: [pulseaudio]
Details (1)
- 17.0-7.5 · x86_64 · tumbleweed
  Unknown · Fixed: 9.0-2.3
  Version impact unknown
  dsa · pulseaudio · opensuse · tumbleweed
[pulseaudio-system-wide]Unknown
Source package: [pulseaudio]
Details (1)
- 17.0-7.5 · x86_64 · tumbleweed
  Unknown · Fixed: 9.0-2.3
  Version impact unknown
  dsa · pulseaudio · opensuse · tumbleweed
[pulseaudio-utils]Unknown
Source package: [pulseaudio]
Details (1)
- 17.0-7.5 · x86_64 · tumbleweed
  Unknown · Fixed: 9.0-2.3
  Version impact unknown
  dsa · pulseaudio · opensuse · tumbleweed
[pulseaudio-utils-32bit]Unknown
Source package: [pulseaudio]
Details (1)
- 17.0-7.5 · x86_64 · tumbleweed
  Unknown · Fixed: 9.0-2.3
  Version impact unknown
  dsa · pulseaudio · opensuse · tumbleweed
[pulseaudio-zsh-completion]Unknown
Source package: [pulseaudio]
Details (1)
- 17.0-7.5 · x86_64 · tumbleweed
  Unknown · Fixed: 9.0-2.3
  Version impact unknown
  dsa · pulseaudio · opensuse · tumbleweed
[system-user-pulse]Unknown
Source package: [pulseaudio]
Details (1)
- 17.0-7.5 · noarch · tumbleweed
  Unknown · Fixed: 9.0-2.3
  Version impact unknown
  dsa · pulseaudio · opensuse · tumbleweed

Next results

Observed: Oct 23, 2026, 5:11:04 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]