{"id":"CVE-2014-3970","details":"The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure and abort) via an empty UDP packet.","modified":"2026-01-27T04:12:46.274785Z","published":"2014-06-11T14:55:09Z","withdrawn":"2026-01-27T04:12:46.274785Z","related":["MGASA-2014-0440","openSUSE-SU-2024:10241-1"],"references":[{"type":"ADVISORY","url":"http://advisories.mageia.org/MGASA-2014-0440.html"},{"type":"ADVISORY","url":"http://secunia.com/advisories/60624"},{"type":"ADVISORY","url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:134"},{"type":"EVIDENCE","url":"http://lists.freedesktop.org/archives/pulseaudio-discuss/2014-May/020740.html"},{"type":"WEB","url":"http://seclists.org/oss-sec/2014/q2/429"},{"type":"WEB","url":"http://seclists.org/oss-sec/2014/q2/437"},{"type":"WEB","url":"http://www.securityfocus.com/bid/67814"}],"schema_version":"1.7.3"}