PulseAudio has a number of know denial of service issues. Some do not even require authentication to be exploited. The details can be found here: http://pulseaudio.org/ticket/67
Fixed upstream. Now we just need to make sure we get a new snapshot.
We've upgraded PulseAudio in 4.0.0.
Indeed upgraded.