Approved changes feed: RSS · Atom
cpe:2.3:a:mumble:mumble:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Mumble (bbcbb6bf-a174-5ad9-93ba-11a3e2c06616) |
|---|---|
| Product | Mumble (4fb4c321-16b6-5fae-91a5-868d37ed04a6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/mumble |
purl2cpe | 2026-06-01 10:15:25.453068 |
pkg:deb/ubuntu/mumble |
purl2cpe | 2026-06-01 10:15:25.453071 |
pkg:github/mumble-voip/mumble |
purl2cpe | 2026-06-01 10:15:25.453074 |
pkg:rpm/fedora/mumble |
purl2cpe | 2026-06-01 10:15:25.453077 |
pkg:rpm/opensuse/mumble |
purl2cpe | 2026-06-01 10:15:25.453080 |
pkg:sourceforge/mumble |
purl2cpe | 2026-06-01 10:15:25.453082 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-71264 |
vulnerable | 2026-06-08 07:43:17.817494 |
Details available
LOW (3.7)
Mumble before 1.6.870 is prone to an out-of-bounds array access, which may result in denial of service (client crash).
Published: 2026-03-16T06:13:51.207Z
Updated: 2026-03-16T14:40:37.627Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27229 |
vulnerable | 2026-06-08 05:30:46.140896 |
Details available
Mumble before 1.3.4 allows remote code execution if a victim navigates to a crafted URL on a server list and clicks on the Open Webpage text.
Published: 2021-02-16T03:04:01.000Z
Updated: 2024-08-03T20:48:15.927Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20743 |
vulnerable | 2026-06-08 05:11:27.812408 |
Details available
murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that are persisted in the database, which allows remote attackers to cause a denial of service (daemon hang or crash) via a message flood.
Published: 2019-01-25T16:00:00.000Z
Updated: 2024-08-05T12:12:28.213Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3755 |
vulnerable | 2026-06-08 05:05:42.604394 |
Details available
The QSvg module in Qt, as used in the Mumble client 1.2.x before 1.2.6, allows remote attackers to cause a denial of service (hang and resource consumption) via a local file reference in an (1) image tag or (2) XML stylesheet in an SVG file.
Published: 2014-11-16T11:00:00.000Z
Updated: 2024-08-06T10:57:16.137Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0863 |
vulnerable | 2026-06-08 05:00:46.014591 |
Details available
Mumble 1.2.3 and earlier uses world-readable permissions for .local/share/data/Mumble/.mumble.sqlite files in home directories, which might allow local users to obtain a cleartext password and configuration data by reading a file.
Published: 2012-04-30T14:00:00.000Z
Updated: 2024-08-06T18:38:14.842Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.