{
  "modified": "2025-08-09T19:01:29Z",
  "published": "2014-06-11T14:55:09Z",
  "id": "CVE-2014-3970",
  "details": "The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure and abort) via an empty UDP packet.",
  "references": [
    {
      "type": "ADVISORY",
      "url": "http://advisories.mageia.org/MGASA-2014-0440.html"
    },
    {
      "type": "ADVISORY",
      "url": "http://secunia.com/advisories/60624"
    },
    {
      "type": "ADVISORY",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:134"
    },
    {
      "type": "EVIDENCE",
      "url": "http://lists.freedesktop.org/archives/pulseaudio-discuss/2014-May/020740.html"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/oss-sec/2014/q2/429"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/oss-sec/2014/q2/437"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/67814"
    }
  ]
}