Test ID:	1.3.6.1.4.1.25623.1.0.702854
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-2854-1)
Summary:	The remote host is missing an update for the Debian 'mumble' package(s) announced via the DSA-2854-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'mumble' package(s) announced via the DSA-2854-1 advisory. Vulnerability Insight: Several issues have been discovered in mumble, a low latency VoIP client. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2014-0044 It was discovered that a malformed Opus voice packet sent to a Mumble client could trigger a NULL pointer dereference or an out-of-bounds array access. A malicious remote attacker could exploit this flaw to mount a denial of service attack against a mumble client by causing the application to crash. CVE-2014-0045 It was discovered that a malformed Opus voice packet sent to a Mumble client could trigger a heap-based buffer overflow. A malicious remote attacker could use this flaw to cause a client crash (denial of service) or potentially use it to execute arbitrary code. The oldstable distribution (squeeze) is not affected by these problems. For the stable distribution (wheezy), these problems have been fixed in version 1.2.3-349-g315b5f5-2.2+deb7u1. For the unstable distribution (sid), these problems will be fixed soon. We recommend that you upgrade your mumble packages. Affected Software/OS: 'mumble' package(s) on Debian 7. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0044 Debian Security Information: DSA-2854 (Google Search) http://www.debian.org/security/2014/dsa-2854 http://osvdb.org/102904 SuSE Security Announcement: openSUSE-SU-2014:0271 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-02/msg00063.html Common Vulnerability Exposure (CVE) ID: CVE-2014-0045 BugTraq ID: 65374 http://www.securityfocus.com/bid/65374 http://osvdb.org/102905 http://osvdb.org/102958
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.