Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 7 & 8 - MGASA-2021-0125 Critical: Mumble Remote Code Execution

mageia
Calendar Grey March 11, 2021
Dist Mageia Esm H88
Recent updates to mumble packages in Mageia tackle a vulnerability linked to remote code execution, bolstering protections for the system against potential threats.
Mumble before 1.3.4 allows remote code execution if a victim navigates to a crafted URL on a server list and clicks on the Open Webpage text (CVE-2021-27229)

Summary

Mumble before 1.3.4 allows remote code execution if a victim navigates to a crafted URL on a server list and clicks on the Open Webpage text (CVE-2021-27229).

References

- https://bugs.mageia.org/show_bug.cgi?id=28450

- https://lists.debian.org/debian-lts-announce/2021/02/msg00022.html

- https://www.cve.org/CVERecord?id=CVE-2021-27229

Topics%20covered

Topics Covered

security advisory critical software update remote code execution security fix mumble Mageia mageia

Resolution

SRPMS

- 7/core/mumble-1.3.4-1.mga7

- 8/core/mumble-1.3.4-1.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 12 Mar 2021
URL: https://advisories.mageia.org/MGASA-2021-0125.html
Type: security
CVE: CVE-2021-27229

Topics%20covered

Topics Covered

security advisory critical software update remote code execution security fix mumble Mageia mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here