CVE-2014-0044

Publication date 8 February 2014

Last updated 24 July 2024


Ubuntu priority

The opus_packet_get_samples_per_frame function in client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots allows remote attackers to cause a denial of service (crash) via a crafted length prefix value, which triggers a NULL pointer dereference or a heap-based buffer over-read (aka "out-of-bounds array access").

Status

Package Ubuntu Release Status
mumble 14.04 LTS trusty Not in release
13.10 saucy Ignored end of life
12.10 quantal Ignored end of life
12.04 LTS precise
Not affected
10.04 LTS lucid Ignored end of life