CVE-2020-15710

Potential double-free in pulseaudio

State: Published
Severity: 5.3 Medium
Published: Nov 19, 2020
Updated: Sep 17, 2024
Reserved: Jul 14, 2020

Description

Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in 1:8.0-0ubuntu3.14.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H	canonical

Weaknesses

CWE-415 Double Free

Affected Products

Product	Versions
PulseAudioCanonical	1:8.0 to before 1:8.0-0ubuntu3.14Affected

References

https://launchpad.net/bugs/1884738vendor-advisory
https://ubuntu.com/USN-4519-1vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.