PatchTheCVEmumblekit vulnerabilities and fixes
Recent CVEs affecting mumblekit, with upgrade or downgrade steps. 2 tracked.
mumblekit has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2014-02-08. Highest priority: CVE-2014-0045 (score 49/100).
- CVE-2014-1916 MEDIUM 5.0 DOWNGRADE MITIGATE The (1) opus_packet_get_nb_frames and (2) opus_packet_get_samples_per_frame functions in the client in MumbleK
- CVE-2014-0045 HIGH 7.5 DOWNGRADE DOWNGRADE The needSamples method in AudioOutputSpeech.cpp in the client in Mumble 1.2.4 and the 1.2.3 pre-release snapsh
FAQ
How do I fix mumblekit vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mumblekit being exploited right now?
None of the tracked mumblekit CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mumblekit CVE should I patch first?
CVE-2014-0045 currently ranks highest (49/100): The needSamples method in AudioOutputSpeech.cpp in the client in Mumble 1.2.4 and the 1.2.3 pre-release snapsh.