CVE-2014-3756

The client in Mumble 1.2.x before 1.2.6 allows remote attackers to force the loading of an external file and cause a denial of service hang and resource consumption via a crafted string that is treated as rich-text by a Qt widget, as demonstrated by the 1 user or 2 channel name in a Qt dialog, 3...

Fedora Update for mumble FEDORA-2014-8183

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: mumble-1.2.6-1.fc20.1

Mumble provides low-latency, high-quality voice communication for gamers. It includes game linking, so voice from other players comes from the direction of their characters, and has echo cancellation so that the sound from your loudspeakers won't be audible to other players...

Qt 4.6.3 "QSslSocketBackendPrivate::transmit()" Denial of Service

No description provided by source. Source: http://aluigi.org/adv/qtsslame-adv.txt Luigi Auriemma Application: Qt http://qt.nokia.com Versions: = 4.6.3 Platforms: Windows, Mac OS X, Linux, mobile devices Bug: QSSLsocket endless loop Exploitation: remote, versus server Date: 29 Jun 2010 Author: Lui...

openSUSE Security Update : mumble (openSUSE-SU-2014:0706-1)

mumble was updated to fix two security issues. - The Mumble client did not properly HTML-escape some external strings before using them in a rich-text HTML context CVE-2014-3756. - SVG images with local file references could trigger client DoS CVE-2014-3755. %NASLMINLEVEL 70300 C Tenable Network...

openSUSE Security Update : mumble (openSUSE-2012-127)

remove read permissions for other users on local sqlite database as it may contain passwords bnc747833, CVE-2012-0863 - don't add built-in CA certificates bnc660784 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

openSUSE Security Update : mumble (openSUSE-SU-2014:0271-1)

This update fixes two security issues with mumble : - bnc862527: updated to version 1.2.5 to address two Denial of Service security issues CVE-2014-0044, CVE-2014-0045. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

GLSA-201406-06 : Mumble: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201406-06 Mumble: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mumble: A crafted length prefix value can trigger a heap-based buffer overflow or NULL pointer dereference in the...

Mumble: Multiple vulnerabilities

Background Mumble is low-latency voice chat software intended for use with gaming. Description Multiple vulnerabilities have been discovered in Mumble: A crafted length prefix value can trigger a heap-based buffer overflow or NULL pointer dereference in the opuspacketgetsamplesperframe function...

Fedora Update for mumble FEDORA-2014-6470

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for mumble FEDORA-2014-6472

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated mumble packages fix two security vulnervabilitites

Updated mumble packages fix security vulnerabilities: In Mumble before 1.2.6, the Mumble client is vulnerable to a Denial of Service attack when rendering crafted SVG files that contain references to files on the local computer, due to an issue in Qt's SVG renderer module. This issue can be...

MGASA-2014-0245 Updated mumble packages fix two security vulnervabilitites

Updated mumble packages fix security vulnerabilities: In Mumble before 1.2.6, the Mumble client is vulnerable to a Denial of Service attack when rendering crafted SVG files that contain references to files on the local computer, due to an issue in Qt's SVG renderer module. This issue can be...

FreeBSD : mumble -- multiple vulnerabilities (77e2e631-e742-11e3-9a25-5404a6a6412c)

Mumble reports : SVG images with local file references could trigger client DoS The Mumble client did not properly HTML-escape some external strings before using them in a rich-text HTML context. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

FreeBSD : mumble -- NULL pointer dereference and heap-based buffer overflow (c2c8c84b-e734-11e3-9a25-5404a6a6412c)

Mumble reports : A malformed Opus voice packet sent to a Mumble client could trigger a NULL pointer dereference or an out-of-bounds array access. A malformed Opus voice packet sent to a Mumble client could trigger a heap-based buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

[SECURITY] Fedora 19 Update: mumble-1.2.6-1.fc19

Mumble provides low-latency, high-quality voice communication for gamers. It includes game linking, so voice from other players comes from the direction of their characters, and has echo cancellation so that the sound from your loudspeakers won't be audible to other players...

[SECURITY] Fedora 20 Update: mumble-1.2.6-1.fc20

Mumble provides low-latency, high-quality voice communication for gamers. It includes game linking, so voice from other players comes from the direction of their characters, and has echo cancellation so that the sound from your loudspeakers won't be audible to other players...

Fedora 19 : mumble-1.2.6-1.fc19 (2014-6470)

New upstream release 1.2.6. This update fixes : - CVE-2014-3755 - CVE-2014-3756 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 20 : mumble-1.2.6-1.fc20 (2014-6472)

New upstream release 1.2.6. This update fixes : - CVE-2014-3755 - CVE-2014-3756 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

[oss-security] Mumble 1.2.6: Mumble-SA-2014-005 and Mumble-SA-2014-006

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi oss-security, The Mumble team has just released Mumble 1.2.6, which contains fixes for the two following vulnerabilities: Mumble-SA-2014-005 http://mumble.info/security/Mumble-SA-2014-005.txt - SVG images with local file references could trigger...