tocsin

Debian/pulseaudio: unknown

PulseAudio 0.9.5 allows remote attackers to cause a denial of service (daemon crash) via (1) a PA_PSTREAM_DESCRIPTOR_LENGTH value of FRAME_SIZE_MAX_ALLOW sent on TCP port 9875, which triggers a p->exp

Action: Upgrade pulseaudio to 0.9.6-1 or later.

Affected

introducedfixedlast affected
00.9.6-1-

Fixed versions

0.9.6-1

Sources

published · modified · JSON