Search CVE reports


Toggle filters

1 – 10 of 10 results


CVE-2021-27229

Medium priority

Some fixes available 6 of 7

Mumble before 1.3.4 allows remote code execution if a victim navigates to a crafted URL on a server list and clicks on the Open Webpage text.

1 affected package

mumble

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
mumble Fixed Fixed Fixed Fixed
Show less packages

CVE-2010-2490

Low priority
Ignored

Mumble: murmur-server has DoS due to malformed client query

1 affected package

mumble

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
mumble
Show less packages

CVE-2019-1000029

Medium priority
Not affected

DoS due to changing # of allowed users in root channel

1 affected package

mumble

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
mumble Not affected Not affected
Show less packages

CVE-2018-20743

Medium priority
Vulnerable

murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that are persisted in the database, which allows remote attackers to cause a denial of service (daemon hang or crash) via a message flood.

1 affected package

mumble

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
mumble Not affected Not affected Not affected Vulnerable Vulnerable
Show less packages

CVE-2014-3756

Medium priority

Some fixes available 1 of 5

The client in Mumble 1.2.x before 1.2.6 allows remote attackers to force the loading of an external file and cause a denial of service (hang and resource consumption) via a crafted string that is treated as rich-text by a Qt...

1 affected package

mumble

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
mumble Not affected
Show less packages

CVE-2014-3755

Medium priority

Some fixes available 1 of 5

The QSvg module in Qt, as used in the Mumble client 1.2.x before 1.2.6, allows remote attackers to cause a denial of service (hang and resource consumption) via a local file reference in an (1) image tag or (2) XML stylesheet in...

1 affected package

mumble

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
mumble Not affected
Show less packages

CVE-2014-1916

Low priority
Not affected

The (1) opus_packet_get_nb_frames and (2) opus_packet_get_samples_per_frame functions in the client in MumbleKit before commit fd190328a9b24d37382b269a5674b0c0c7a7e36d and Mumble for iOS 1.1 through 1.2.2 do not properly check the...

1 affected package

mumble

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
mumble
Show less packages

CVE-2014-0045

Medium priority
Ignored

The needSamples method in AudioOutputSpeech.cpp in the client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots, Mumble for iOS 1.1 through 1.2.2, and MumbleKit before commit fd190328a9b24d37382b269a5674b0c0c7a7e36d does not...

1 affected package

mumble

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
mumble Not affected
Show less packages

CVE-2014-0044

Medium priority
Ignored

The opus_packet_get_samples_per_frame function in client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots allows remote attackers to cause a denial of service (crash) via a crafted length prefix value, which triggers a NULL...

1 affected package

mumble

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
mumble
Show less packages

CVE-2012-0863

Medium priority

Some fixes available 4 of 5

Mumble 1.2.3 and earlier uses world-readable permissions for .local/share/data/Mumble/.mumble.sqlite files in home directories, which might allow local users to obtain a cleartext password and configuration data by reading a file.

1 affected package

mumble

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
mumble
Show less packages