Improper Resource Shutdown or Release

CVE-2024-11586

Medium

4/10

Summary

Ubuntu's implementation of pulseaudio can be crashed by a malicious program if a bluetooth headset is connected.

Attack Complexity: HIGH
Attack Vector: LOCAL
Integrity Impact: NONE
Scope: UNCHANGED
User Interaction: REQUIRED
Privileges Required: HIGH
Confidentiality Impact: NONE
Availability Impact: HIGH

CWE-404 - Improper Resource Shutdown or Release

The program does not release or incorrectly releases a resource before it is made available for re-use.

References

Advisory Timeline

Published Nov 23, 2024