PulseAudio vulnerability

2008-01-3100:00:00

ubuntu.com

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.2

Confidence

Low

EPSS

Percentile

10.1%

JSON

Releases

Ubuntu 7.10
Ubuntu 7.04

Packages

pulseaudio -

Details

It was discovered that PulseAudio did not properly drop privileges
when running as a daemon. Local users may be able to exploit this
and gain privileges. The default Ubuntu configuration is not
affected.

OSVersionArchitecturePackageVersionFilename
Ubuntu7.10noarchpulseaudio< 0.9.6-1ubuntu2.1UNKNOWN
Ubuntu7.10noarchlibpulse-browse0< 0.9.6-1ubuntu2.1UNKNOWN
Ubuntu7.10noarchlibpulse-dev< 0.9.6-1ubuntu2.1UNKNOWN
Ubuntu7.10noarchlibpulse-mainloop-glib0< 0.9.6-1ubuntu2.1UNKNOWN
Ubuntu7.10noarchlibpulse0< 0.9.6-1ubuntu2.1UNKNOWN
Ubuntu7.10noarchpulseaudio-esound-compat< 0.9.6-1ubuntu2.1UNKNOWN
Ubuntu7.10noarchpulseaudio-module-gconf< 0.9.6-1ubuntu2.1UNKNOWN
Ubuntu7.10noarchpulseaudio-module-hal< 0.9.6-1ubuntu2.1UNKNOWN
Ubuntu7.10noarchpulseaudio-module-lirc< 0.9.6-1ubuntu2.1UNKNOWN
Ubuntu7.10noarchpulseaudio-module-x11< 0.9.6-1ubuntu2.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	7.10	noarch	pulseaudio	< 0.9.6-1ubuntu2.1	UNKNOWN
Ubuntu	7.10	noarch	libpulse-browse0	< 0.9.6-1ubuntu2.1	UNKNOWN
Ubuntu	7.10	noarch	libpulse-dev	< 0.9.6-1ubuntu2.1	UNKNOWN
Ubuntu	7.10	noarch	libpulse-mainloop-glib0	< 0.9.6-1ubuntu2.1	UNKNOWN
Ubuntu	7.10	noarch	libpulse0	< 0.9.6-1ubuntu2.1	UNKNOWN
Ubuntu	7.10	noarch	pulseaudio-esound-compat	< 0.9.6-1ubuntu2.1	UNKNOWN
Ubuntu	7.10	noarch	pulseaudio-module-gconf	< 0.9.6-1ubuntu2.1	UNKNOWN
Ubuntu	7.10	noarch	pulseaudio-module-hal	< 0.9.6-1ubuntu2.1	UNKNOWN
Ubuntu	7.10	noarch	pulseaudio-module-lirc	< 0.9.6-1ubuntu2.1	UNKNOWN
Ubuntu	7.10	noarch	pulseaudio-module-x11	< 0.9.6-1ubuntu2.1	UNKNOWN