LWN.net Logo

pulseaudio: ignores setuid() return value

Package(s):pulseaudio CVE #(s):CVE-2008-0008
Created:January 25, 2008 Updated:February 14, 2008
Description: Pulseaudio ignores setuid() return value. A user can cause the call to fail by exhausting the resources in some cases.
Alerts:
Gentoo 200802-07 2008-02-13
Ubuntu USN-573-1 2008-01-31
Mandriva MDVSA-2008:027 2007-01-25
Debian DSA-1476-1 2008-01-27
Fedora FEDORA-2008-0994 2008-01-24
Fedora FEDORA-2008-0963 2008-01-24

(Log in to post comments)

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds