CVE-2024-11586: Medium severity Ubuntu PulseAudio vulnerability

Published Nov 23, 2024

Updated

Ubuntu's implementation of pulseaudio can be crashed by a malicious program if a bluetooth headset is connected.

Affected Software

3 affected components

Ubuntu PulseAudio

All of the following

Pulseaudio Pulseaudio

Canonical Ubuntu Linux=16.04

Remediation

Patch Available

https://bugs.launchpad.net/ubuntu/+source/pulseaudio/+bug/2078822

Event History

Nov 23, 2024

CVE Published

via MITRE·02:05 AM

Data Sourced

via MITRE·02:05 AM

DescriptionSeverity

Data Sourced

via NVD·03:15 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-11586?

CVE-2024-11586 has been classified as a high-severity vulnerability because it can be exploited by malicious programs to crash PulseAudio on Ubuntu when a Bluetooth headset is connected.

How do I fix CVE-2024-11586?

To fix CVE-2024-11586, users should update their Ubuntu system to the latest package version that addresses this vulnerability.

What systems are affected by CVE-2024-11586?

CVE-2024-11586 affects Ubuntu systems running PulseAudio with Bluetooth headset connectivity.

Can CVE-2024-11586 be exploited remotely?

CVE-2024-11586 may be triggered by malicious programs running on the same system, but it cannot be exploited remotely without local access.

What are the potential impacts of CVE-2024-11586?

The main impact of CVE-2024-11586 is that it can cause a denial of service by crashing the PulseAudio service on affected Ubuntu installations.