Debian/pulseaudio: unknown

The pa_drop_root function in PulseAudio 0.9.8, and a certain 0.9.9 build, does not check return values from (1) setresuid, (2) setreuid, (3) setuid, and (4) seteuid calls when attempting to drop privi

Action: Upgrade pulseaudio to 0.9.9-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2008-0008#Debian:13/pulseaudio
• https://security-tracker.debian.org/tracker/CVE-2008-0008

published 2008-01-29T00:00:00Z · modified 2026-10-23T17:47:35.370715553Z · JSON