EUVD-2012-0888

Malware in sbrugna...

EUVD-2018-13288

Malware in sbrugna...

EUVD-2014-3695

Malware in sbrugna...

EUVD-2014-0141

Malware in sbrugna...

EUVD-2014-0142

Malware in sbrugna...

EUVD-2014-3694

Malware in sbrugna...

EUVD-2021-13994

Malware in sbrugna...

EUVD-2020-6136

Malware in sbrugna...

EUVD-2010-2495

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2018-20743

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that are persisted in the database, which allows remote attackers to...

CVE-2014-1916

The 1 opuspacketgetnbframes and 2 opuspacketgetsamplesperframe functions in the client in MumbleKit before commit fd190328a9b24d37382b269a5674b0c0c7a7e36d and Mumble for iOS 1.1 through 1.2.2 do not properly check the return value of the copyDataBlock method, which allow remote attackers to cause...

PT-2026-25616

CVE-2025-71264 Mumble before 1.6.870 is prone to an out-of-bounds array access, which may result in denial of service client crash. https://t.co/obMTVcktJe...

OPENSUSE-SU-2024:10080-1 mumble-1.2.17-1.2 on GA media

These are all security issues fixed in the mumble-1.2.17-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11065-1 mumble-1.3.4-2.7 on GA media

These are all security issues fixed in the mumble-1.3.4-2.7 package on the GA media of openSUSE Tumbleweed...

Ubuntu 16.04 ESM : Mumble vulnerability (USN-5195-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5195-2 advisory. It was discovered that the Mumble client supported websites for public servers with arbitrary URL schemes. If a user were tricked into visiting a malicious websit...

SUSE CVE-2012-0863

Mumble 1.2.3 and earlier uses world-readable permissions for .local/share/data/Mumble/.mumble.sqlite files in home directories, which might allow local users to obtain a cleartext password and configuration data by reading a file...

SUSE CVE-2014-0045

The needSamples method in AudioOutputSpeech.cpp in the client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots, Mumble for iOS 1.1 through 1.2.2, and MumbleKit before commit fd190328a9b24d37382b269a5674b0c0c7a7e36d does not check the return value of the opusdecodefloat function, which allows...

SUSE CVE-2014-0044

The opuspacketgetsamplesperframe function in client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots allows remote attackers to cause a denial of service crash via a crafted length prefix value, which triggers a NULL pointer dereference or a heap-based buffer over-read aka "out-of-bounds array...

SUSE CVE-2014-3755

The QSvg module in Qt, as used in the Mumble client 1.2.x before 1.2.6, allows remote attackers to cause a denial of service hang and resource consumption via a local file reference in an 1 image tag or 2 XML stylesheet in an SVG file...

SUSE CVE-2014-3756

The client in Mumble 1.2.x before 1.2.6 allows remote attackers to force the loading of an external file and cause a denial of service hang and resource consumption via a crafted string that is treated as rich-text by a Qt widget, as demonstrated by the 1 user or 2 channel name in a Qt dialog, 3...