CVE-2021-27229: High severity mumble vulnerability
Published Feb 16, 2021
·Updated
Mumble before 1.3.4 allows remote code execution if a victim navigates to a crafted URL on a server list and clicks on the Open Webpage text.
Affected Software
2 affected components
Mumble Mumble<1.3.4
Debian Debian Linux=9.0
Remediation
Patch Available
Patch Available
Event History
Feb 16, 2021
CVE Published
via MITRE·03:04 AM
Data Sourced
via MITRE·03:04 AM
Description
Frequently Asked Questions
1
What is CVE-2021-27229?
CVE-2021-27229 is a vulnerability in Mumble before version 1.3.4 that allows remote code execution if a victim navigates to a crafted URL on a server list and clicks on the Open Webpage text.
2
What software versions are affected by CVE-2021-27229?
CVE-2021-27229 affects Mumble versions up to and excluding 1.3.4.
3
How severe is CVE-2021-27229?
CVE-2021-27229 has a severity rating of 8.8 (High).
4
How can I fix CVE-2021-27229?
To fix CVE-2021-27229, update Mumble to version 1.3.4 or later.
5
What is the Common Weakness Enumeration (CWE) ID of CVE-2021-27229?
The CWE ID of CVE-2021-27229 is 59.