CVE-2014-0044

The opus_packet_get_samples_per_frame function in client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots allows remote attackers to cause a denial of…

published February 8, 2014

CVSS
—
EPSS
2%
Percentile
84.1
In the wild
Unconfirmed
What it is

The opus_packet_get_samples_per_frame function in client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots allows remote attackers to cause a denial of service (crash) via a crafted length prefix value, which triggers a NULL pointer dereference or a heap-based buffer over-read (aka "out-of-bounds array access").

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02448 · 84.1th percentile
Published
2014-02-08T00:00Z
EPSS history
Timeline
  • 08 FEB 00:00Z
    The opus_packet_get_samples_per_frame function in client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots allows remote attackers to cause a denial of…
    cvelistv5