CVE-2024-11586

CVSS 3.1 Score 4 of 10 (medium)

Details

Published Nov 23, 2024
Updated: Nov 25, 2024
CWE ID 404

Summary

CVE-2024-11586 is a newly disclosed vulnerability affecting Ubuntu's pulseaudio implementation. Malicious programs can exploit this vulnerability by connecting a Bluetooth headset, resulting in a pulseaudio crash. This issue may lead to denial of service or potential unintended system behavior. Users are encouraged to update their systems as soon as patches become available to mitigate this risk. Connecting untrusted Bluetooth devices should be done with caution to prevent potential exploitation.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share