PT-2014-1786 · Mumble+1 · Mumble+3

Published 2014-02-08 · Updated 2024-06-15 · CVE-2014-0045

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mumble versions 1.1 through 1.2.4 Mumble for iOS versions 1.1 through 1.2.2 MumbleKit versions prior to commit fd190328a9b24d37382b269a5674b0c0c7a7e36d

Description The issue concerns multiple vulnerabilities in the Mumble package of the Debian GNU/Linux operating system, which can lead to breaches of confidentiality, integrity, and availability of protected information. Exploitation can be carried out remotely. Specifically, the needSamples method in AudioOutputSpeech.cpp does not check the return value of the opus decode float function, allowing remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Opus voice packet. This triggers an error in opus decode float, a conversion of a negative integer to an unsigned integer, and a heap-based buffer over-read and over-write.

Recommendations For Mumble versions 1.1 through 1.2.4, update to a version that includes a fix for the needSamples method in AudioOutputSpeech.cpp. For Mumble for iOS versions 1.1 through 1.2.2, update to a version that includes a fix for the needSamples method in AudioOutputSpeech.cpp. For MumbleKit versions prior to commit fd190328a9b24d37382b269a5674b0c0c7a7e36d, update to a version that includes a fix for the needSamples method in AudioOutputSpeech.cpp. As a temporary workaround, consider disabling the needSamples method in AudioOutputSpeech.cpp until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-189

Related Identifiers

BDU:2015-04025

CVE-2014-0045

DSA-2854-1

OPENSUSE-SU-2024:10080-1

Affected Products

Debian

Mumble

Mumble For Ios

Mumblekit

References · 25

• https://security-tracker.debian.org/tracker/CVE-2014-0045 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-0045 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10080-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-0045 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0045 · Security Note
• https://cve.org/CVERecord?id=CVE-2014-0045 · Security Note
• https://osv.dev/vulnerability/CVE-2014-0045 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0044 · Security Note
• https://ubuntu.com/security/CVE-2014-0045 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04025 · Security Note
• http://lists.opensuse.org/opensuse-updates/2014-02/msg00063.html · Vendor Advisory
• http://mumble.info/security/Mumble-SA-2014-004.txt · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0045 · Security Note
• http://debian.org/security/2014/dsa-2854 · Vendor Advisory
• https://suse.com/security/cve/CVE-2014-0045 · Note