Gentoo: GLSA 200907-13 High: PulseAudio Local Privilege Escalation
gentoo
July 16, 2009
A vulnerability in PulseAudio may allow a local user to execute code with escalated privileges.
Summary
Gentoo Linux Security Advisory GLSA 200907-13
https://security.gentoo.org/
Severity: High
Title: PulseAudio: Local privilege escalation
Date: July 16, 2009
Bugs: #276986
ID: 200907-13
Synopsis
=======
A vulnerability in PulseAudio may allow a local user to execute code
with escalated privileges.
Background
=========
PulseAudio is a network-enabled sound server with an advanced plug-in
system.
Affected packages
================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 media-sound/pulseaudio < 0.9.9-r54 >= 0.9.9-r54
==========
Tavis Ormandy and Julien Tinnes of the Google Security Team discovered
that the pulseaudio binary is installed setuid root, and does not drop
privileges before re-executing...
Topics Covered
Resolution
References
Availability
style>.gentoo_availability{display:block;}
Concerns
PREVIOUS
NEXT
Warning: Undefined array key "advisory_info" in /var/www/www.linuxsecurity.com-443/html/tmp/regularlabs/custom_php/3373482_4c9dbbdde36eef04251a4ced7eac4df9 on line 11
Topics Covered
Background
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Affected Packages
Impact
Workaround
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!