Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Gentoo: GLSA-200802-07 High Severity: Pulseaudio Privilege Escalation

gentoo
Calendar Grey February 13, 2008
Scroller Gentoo
Gentoo GLSA 200802-07 highlights critical privilege escalation in Pulseaudio, requiring immediate updates for users.
A vulnerability in pulseaudio may allow a local user to execute actions with escalated privileges.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200802-07
                                            https://security.gentoo.org/

  Severity: High
     Title: Pulseaudio: Privilege escalation
      Date: February 13, 2008
      Bugs: #207214
        ID: 200802-07


Synopsis
=======
A vulnerability in pulseaudio may allow a local user to execute actions
with escalated privileges.

Background
=========
Pulseaudio is a networked sound server with an advanced plugin system.

Affected packages
================
    -------------------------------------------------------------------
     Package                 /  Vulnerable  /               Unaffected
    -------------------------------------------------------------------
  1  media-sound/pulseaudio       < 0.9.9                     >= 0.9.9

==========
Marcus Meissner from SUSE reported that the pa_drop_root() function
does not properly check the return value of the system calls set...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory high severity gentoo software update privilege escalation local attack pulseaudio

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory high severity gentoo software update privilege escalation local attack pulseaudio

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround