CVE-2008-0008 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2008-0008 Interim 1 10 2025-11-05T06:16:53Z current 2021-05-30T12:41:24Z 2025-11-05T06:16:53Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2008-0008 The pa_drop_root function in PulseAudio 0.9.8, and a certain 0.9.9 build, does not check return values from (1) setresuid, (2) setreuid, (3) setuid, and (4) seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail via attacks such as resource exhaustion. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Software Development Kit 11 SP4 openSUSE Tumbleweed libpulse-browse0-0.9.21-1.5.26 libpulse-browse0-0.9.23-0.17.1 libpulse-browse0-0.9.23-0.7.128 libpulse-devel-0.9.23-0.17.1 libpulse-devel-15.0-3.1 libpulse-devel-17.0-160000.2.2 libpulse-devel-32bit-15.0-3.1 libpulse-mainloop-glib0-0.9.21-1.5.26 libpulse-mainloop-glib0-0.9.23-0.17.1 libpulse-mainloop-glib0-0.9.23-0.7.128 libpulse-mainloop-glib0-15.0-3.1 libpulse-mainloop-glib0-17.0-160000.2.2 libpulse-mainloop-glib0-32bit-0.9.23-0.17.1 libpulse-mainloop-glib0-32bit-15.0-3.1 libpulse-mainloop-glib0-x86-0.9.23-0.17.1 libpulse0-0.9.21-1.5.26 libpulse0-0.9.23-0.17.1 libpulse0-0.9.23-0.7.128 libpulse0-15.0-3.1 libpulse0-17.0-160000.2.2 libpulse0-32bit-0.9.21-1.5.26 libpulse0-32bit-0.9.23-0.17.1 libpulse0-32bit-0.9.23-0.7.128 libpulse0-32bit-15.0-3.1 libpulse0-x86-0.9.21-1.5.26 libpulse0-x86-0.9.23-0.17.1 libpulse0-x86-0.9.23-0.7.128 pulseaudio-0.9.21-1.5.26 pulseaudio-0.9.23-0.17.1 pulseaudio-0.9.23-0.7.128 pulseaudio-15.0-3.1 pulseaudio-bash-completion-15.0-3.1 pulseaudio-bash-completion-17.0-160000.2.2 pulseaudio-esound-compat-0.9.21-1.5.26 pulseaudio-esound-compat-0.9.23-0.17.1 pulseaudio-esound-compat-0.9.23-0.7.128 pulseaudio-gdm-hooks-0.9.21-1.5.26 pulseaudio-gdm-hooks-0.9.23-0.17.1 pulseaudio-gdm-hooks-0.9.23-0.7.128 pulseaudio-gdm-hooks-15.0-3.1 pulseaudio-lang-0.9.21-1.5.26 pulseaudio-lang-0.9.23-0.17.1 pulseaudio-lang-0.9.23-0.7.128 pulseaudio-lang-15.0-3.1 pulseaudio-module-bluetooth-15.0-3.1 pulseaudio-module-gsettings-15.0-3.1 pulseaudio-module-jack-15.0-3.1 pulseaudio-module-lirc-15.0-3.1 pulseaudio-module-x11-0.9.21-1.5.26 pulseaudio-module-x11-0.9.23-0.17.1 pulseaudio-module-x11-0.9.23-0.7.128 pulseaudio-module-x11-15.0-3.1 pulseaudio-module-zeroconf-0.9.21-1.5.26 pulseaudio-module-zeroconf-0.9.23-0.17.1 pulseaudio-module-zeroconf-0.9.23-0.7.128 pulseaudio-module-zeroconf-15.0-3.1 pulseaudio-setup-17.0-160000.2.2 pulseaudio-system-wide-15.0-3.1 pulseaudio-utils-0.9.21-1.5.26 pulseaudio-utils-0.9.23-0.17.1 pulseaudio-utils-0.9.23-0.7.128 pulseaudio-utils-15.0-3.1 pulseaudio-utils-17.0-160000.2.2 pulseaudio-utils-32bit-15.0-3.1 pulseaudio-zsh-completion-15.0-3.1 pulseaudio-zsh-completion-17.0-160000.2.2 system-user-pulse-17.0-160000.2.2 libpulse-browse0-0.9.21-1.5.26 as a component of SUSE Linux Enterprise Server 11 SP1 libpulse-mainloop-glib0-0.9.21-1.5.26 as a component of SUSE Linux Enterprise Server 11 SP1 libpulse0-0.9.21-1.5.26 as a component of SUSE Linux Enterprise Server 11 SP1 libpulse0-32bit-0.9.21-1.5.26 as a component of SUSE Linux Enterprise Server 11 SP1 libpulse0-x86-0.9.21-1.5.26 as a component of SUSE Linux Enterprise Server 11 SP1 pulseaudio-0.9.21-1.5.26 as a component of SUSE Linux Enterprise Server 11 SP1 pulseaudio-esound-compat-0.9.21-1.5.26 as a component of SUSE Linux Enterprise Server 11 SP1 pulseaudio-gdm-hooks-0.9.21-1.5.26 as a component of SUSE Linux Enterprise Server 11 SP1 pulseaudio-lang-0.9.21-1.5.26 as a component of SUSE Linux Enterprise Server 11 SP1 pulseaudio-module-x11-0.9.21-1.5.26 as a component of SUSE Linux Enterprise Server 11 SP1 pulseaudio-module-zeroconf-0.9.21-1.5.26 as a component of SUSE Linux Enterprise Server 11 SP1 pulseaudio-utils-0.9.21-1.5.26 as a component of SUSE Linux Enterprise Server 11 SP1 libpulse-browse0-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP2 libpulse-mainloop-glib0-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP2 libpulse0-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP2 libpulse0-32bit-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP2 libpulse0-x86-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP2 pulseaudio-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP2 pulseaudio-esound-compat-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP2 pulseaudio-gdm-hooks-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP2 pulseaudio-lang-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP2 pulseaudio-module-x11-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP2 pulseaudio-module-zeroconf-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP2 pulseaudio-utils-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP2 libpulse-browse0-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP3 libpulse-mainloop-glib0-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP3 libpulse0-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP3 libpulse0-32bit-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP3 libpulse0-x86-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP3 pulseaudio-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP3 pulseaudio-esound-compat-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP3 pulseaudio-gdm-hooks-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP3 pulseaudio-lang-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP3 pulseaudio-module-x11-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP3 pulseaudio-module-zeroconf-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP3 pulseaudio-utils-0.9.23-0.7.128 as a component of SUSE Linux Enterprise Server 11 SP3 libpulse-browse0-0.9.23-0.17.1 as a component of SUSE Linux Enterprise Server 11 SP4 libpulse-mainloop-glib0-0.9.23-0.17.1 as a component of SUSE Linux Enterprise Server 11 SP4 libpulse-mainloop-glib0-32bit-0.9.23-0.17.1 as a component of SUSE Linux Enterprise Server 11 SP4 libpulse-mainloop-glib0-x86-0.9.23-0.17.1 as a component of SUSE Linux Enterprise Server 11 SP4 libpulse0-0.9.23-0.17.1 as a component of SUSE Linux Enterprise Server 11 SP4 libpulse0-32bit-0.9.23-0.17.1 as a component of SUSE Linux Enterprise Server 11 SP4 libpulse0-x86-0.9.23-0.17.1 as a component of SUSE Linux Enterprise Server 11 SP4 pulseaudio-0.9.23-0.17.1 as a component of SUSE Linux Enterprise Server 11 SP4 pulseaudio-esound-compat-0.9.23-0.17.1 as a component of SUSE Linux Enterprise Server 11 SP4 pulseaudio-gdm-hooks-0.9.23-0.17.1 as a component of SUSE Linux Enterprise Server 11 SP4 pulseaudio-lang-0.9.23-0.17.1 as a component of SUSE Linux Enterprise Server 11 SP4 pulseaudio-module-x11-0.9.23-0.17.1 as a component of SUSE Linux Enterprise Server 11 SP4 pulseaudio-module-zeroconf-0.9.23-0.17.1 as a component of SUSE Linux Enterprise Server 11 SP4 pulseaudio-utils-0.9.23-0.17.1 as a component of SUSE Linux Enterprise Server 11 SP4 libpulse-devel-17.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libpulse-mainloop-glib0-17.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libpulse0-17.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 pulseaudio-bash-completion-17.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 pulseaudio-setup-17.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 pulseaudio-utils-17.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 pulseaudio-zsh-completion-17.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 system-user-pulse-17.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libpulse-devel-0.9.23-0.17.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libpulse-devel-15.0-3.1 as a component of openSUSE Tumbleweed libpulse-devel-32bit-15.0-3.1 as a component of openSUSE Tumbleweed libpulse-mainloop-glib0-15.0-3.1 as a component of openSUSE Tumbleweed libpulse-mainloop-glib0-32bit-15.0-3.1 as a component of openSUSE Tumbleweed libpulse0-15.0-3.1 as a component of openSUSE Tumbleweed libpulse0-32bit-15.0-3.1 as a component of openSUSE Tumbleweed pulseaudio-15.0-3.1 as a component of openSUSE Tumbleweed pulseaudio-bash-completion-15.0-3.1 as a component of openSUSE Tumbleweed pulseaudio-gdm-hooks-15.0-3.1 as a component of openSUSE Tumbleweed pulseaudio-lang-15.0-3.1 as a component of openSUSE Tumbleweed pulseaudio-module-bluetooth-15.0-3.1 as a component of openSUSE Tumbleweed pulseaudio-module-gsettings-15.0-3.1 as a component of openSUSE Tumbleweed pulseaudio-module-jack-15.0-3.1 as a component of openSUSE Tumbleweed pulseaudio-module-lirc-15.0-3.1 as a component of openSUSE Tumbleweed pulseaudio-module-x11-15.0-3.1 as a component of openSUSE Tumbleweed pulseaudio-module-zeroconf-15.0-3.1 as a component of openSUSE Tumbleweed pulseaudio-system-wide-15.0-3.1 as a component of openSUSE Tumbleweed pulseaudio-utils-15.0-3.1 as a component of openSUSE Tumbleweed pulseaudio-utils-32bit-15.0-3.1 as a component of openSUSE Tumbleweed pulseaudio-zsh-completion-15.0-3.1 as a component of openSUSE Tumbleweed The pa_drop_root function in PulseAudio 0.9.8, and a certain 0.9.9 build, does not check return values from (1) setresuid, (2) setreuid, (3) setuid, and (4) seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail via attacks such as resource exhaustion. CVE-2008-0008 SUSE Linux Enterprise Server 11 SP1:libpulse-browse0-0.9.21-1.5.26 SUSE Linux Enterprise Server 11 SP1:libpulse-mainloop-glib0-0.9.21-1.5.26 SUSE Linux Enterprise Server 11 SP1:libpulse0-0.9.21-1.5.26 SUSE Linux Enterprise Server 11 SP1:libpulse0-32bit-0.9.21-1.5.26 SUSE Linux Enterprise Server 11 SP1:libpulse0-x86-0.9.21-1.5.26 SUSE Linux Enterprise Server 11 SP1:pulseaudio-0.9.21-1.5.26 SUSE Linux Enterprise Server 11 SP1:pulseaudio-esound-compat-0.9.21-1.5.26 SUSE Linux Enterprise Server 11 SP1:pulseaudio-gdm-hooks-0.9.21-1.5.26 SUSE Linux Enterprise Server 11 SP1:pulseaudio-lang-0.9.21-1.5.26 SUSE Linux Enterprise Server 11 SP1:pulseaudio-module-x11-0.9.21-1.5.26 SUSE Linux Enterprise Server 11 SP1:pulseaudio-module-zeroconf-0.9.21-1.5.26 SUSE Linux Enterprise Server 11 SP1:pulseaudio-utils-0.9.21-1.5.26 SUSE Linux Enterprise Server 11 SP2:libpulse-browse0-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP2:libpulse-mainloop-glib0-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP2:libpulse0-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP2:libpulse0-32bit-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP2:libpulse0-x86-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP2:pulseaudio-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP2:pulseaudio-esound-compat-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP2:pulseaudio-gdm-hooks-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP2:pulseaudio-lang-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP2:pulseaudio-module-x11-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP2:pulseaudio-module-zeroconf-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP2:pulseaudio-utils-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP3:libpulse-browse0-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP3:libpulse-mainloop-glib0-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP3:libpulse0-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP3:libpulse0-32bit-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP3:libpulse0-x86-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP3:pulseaudio-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP3:pulseaudio-esound-compat-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP3:pulseaudio-gdm-hooks-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP3:pulseaudio-lang-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP3:pulseaudio-module-x11-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP3:pulseaudio-module-zeroconf-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP3:pulseaudio-utils-0.9.23-0.7.128 SUSE Linux Enterprise Server 11 SP4:libpulse-browse0-0.9.23-0.17.1 SUSE Linux Enterprise Server 11 SP4:libpulse-mainloop-glib0-0.9.23-0.17.1 SUSE Linux Enterprise Server 11 SP4:libpulse-mainloop-glib0-32bit-0.9.23-0.17.1 SUSE Linux Enterprise Server 11 SP4:libpulse-mainloop-glib0-x86-0.9.23-0.17.1 SUSE Linux Enterprise Server 11 SP4:libpulse0-0.9.23-0.17.1 SUSE Linux Enterprise Server 11 SP4:libpulse0-32bit-0.9.23-0.17.1 SUSE Linux Enterprise Server 11 SP4:libpulse0-x86-0.9.23-0.17.1 SUSE Linux Enterprise Server 11 SP4:pulseaudio-0.9.23-0.17.1 SUSE Linux Enterprise Server 11 SP4:pulseaudio-esound-compat-0.9.23-0.17.1 SUSE Linux Enterprise Server 11 SP4:pulseaudio-gdm-hooks-0.9.23-0.17.1 SUSE Linux Enterprise Server 11 SP4:pulseaudio-lang-0.9.23-0.17.1 SUSE Linux Enterprise Server 11 SP4:pulseaudio-module-x11-0.9.23-0.17.1 SUSE Linux Enterprise Server 11 SP4:pulseaudio-module-zeroconf-0.9.23-0.17.1 SUSE Linux Enterprise Server 11 SP4:pulseaudio-utils-0.9.23-0.17.1 SUSE Linux Enterprise Server 16.0:libpulse-devel-17.0-160000.2.2 SUSE Linux Enterprise Server 16.0:libpulse-mainloop-glib0-17.0-160000.2.2 SUSE Linux Enterprise Server 16.0:libpulse0-17.0-160000.2.2 SUSE Linux Enterprise Server 16.0:pulseaudio-bash-completion-17.0-160000.2.2 SUSE Linux Enterprise Server 16.0:pulseaudio-setup-17.0-160000.2.2 SUSE Linux Enterprise Server 16.0:pulseaudio-utils-17.0-160000.2.2 SUSE Linux Enterprise Server 16.0:pulseaudio-zsh-completion-17.0-160000.2.2 SUSE Linux Enterprise Server 16.0:system-user-pulse-17.0-160000.2.2 SUSE Linux Enterprise Software Development Kit 11 SP4:libpulse-devel-0.9.23-0.17.1 openSUSE Tumbleweed:libpulse-devel-15.0-3.1 openSUSE Tumbleweed:libpulse-devel-32bit-15.0-3.1 openSUSE Tumbleweed:libpulse-mainloop-glib0-15.0-3.1 openSUSE Tumbleweed:libpulse-mainloop-glib0-32bit-15.0-3.1 openSUSE Tumbleweed:libpulse0-15.0-3.1 openSUSE Tumbleweed:libpulse0-32bit-15.0-3.1 openSUSE Tumbleweed:pulseaudio-15.0-3.1 openSUSE Tumbleweed:pulseaudio-bash-completion-15.0-3.1 openSUSE Tumbleweed:pulseaudio-gdm-hooks-15.0-3.1 openSUSE Tumbleweed:pulseaudio-lang-15.0-3.1 openSUSE Tumbleweed:pulseaudio-module-bluetooth-15.0-3.1 openSUSE Tumbleweed:pulseaudio-module-gsettings-15.0-3.1 openSUSE Tumbleweed:pulseaudio-module-jack-15.0-3.1 openSUSE Tumbleweed:pulseaudio-module-lirc-15.0-3.1 openSUSE Tumbleweed:pulseaudio-module-x11-15.0-3.1 openSUSE Tumbleweed:pulseaudio-module-zeroconf-15.0-3.1 openSUSE Tumbleweed:pulseaudio-system-wide-15.0-3.1 openSUSE Tumbleweed:pulseaudio-utils-15.0-3.1 openSUSE Tumbleweed:pulseaudio-utils-32bit-15.0-3.1 openSUSE Tumbleweed:pulseaudio-zsh-completion-15.0-3.1 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C