View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2014-3970 severity low: SUSE including 155 source package names (libpulse-browse0-0.9.21-1.16.2, libpulse-browse0-0.9.23-0.15.1, …), 512 product×package rows across 57 product lines (HPE Helion OpenStack 8, SUSE Linux Enterprise Desktop 11 SP3, … (57 product lines)): Fixed 350, Known Not Affected 162.
The pa_rtp_recv function in modules/rtp/rtp.c in the module-rtp-recv module in PulseAudio 5.0 and earlier allows remote attackers to cause a denial of service (assertion failure and abort) via an empty UDP packet.