Bug 1098233 (CVE-2014-3756)

Summary:	CVE-2014-3756 mumble: Mumble-SA-2014-006 - DoS (hang and/or resource exhaustion) on a Mumble client by causing it to load external files via the HTML
Product:	[Other] Security Response	Reporter:	Vasyl Kaigorodov <vkaigoro>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	chkr, j.golderer
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-09-05 18:57:41 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Vasyl Kaigorodov 2014-05-15 14:22:31 UTC

It was discovoered [1] that the Mumble client did not properly HTML-escape some external strings before using them in a rich-text (HTML) context.
In some situations, this could be abused to perform a Denial of Service attack (hang and/or resource exhaustion) on a Mumble client by causing it to load external files via the HTML.

A fix for this issue has been released in Mumble 1.2.6.
The fix is also available in the Mumble git repo as:
	e30d7acda6c04b667618ac86f49786cf966a08fb (on the v1.2.6 branch).

[1]: http://mumble.info/security/Mumble-SA-2014-006.txt

Comment 1 Fedora Update System 2014-05-28 02:54:12 UTC

mumble-1.2.6-1.fc20 has been pushed to the Fedora 20 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 2 Fedora Update System 2014-05-28 02:55:30 UTC

mumble-1.2.6-1.fc19 has been pushed to the Fedora 19 stable repository.  If problems still persist, please make note of it in this bug report.