Every CVE Search/ Get API key

CVE-2018-20743

murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that...

7.5 HighFix available

CVE-2018-20743 is a high vulnerability (CVSS 7.5) in Mumble, published January 25, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.62%, the 89th percentile. Fixed in mumble 1.2.19-r9.

murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that are persisted in the database, which allows remote attackers to cause a denial of service (daemon hang or crash) via a message flood.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

3.62%Up 0.4 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that are persisted in the database, which allows remote attackers to cause a denial of service (daemon hang or crash) via a message flood.

Record
CVE-2018-20743
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that are persisted in the database, which allows remote attackers to cause a denial of service (daemon hang or crash) via a message flood.

Record
CVE-2018-20743
Updated
2026-11-02
EUVDEUVD-2018-13288 No score

murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that are persisted in the database, which allows remote attackers to cause a denial of service (daemon hang or crash) via a message flood.

Record
EUVD-2018-13288
Updated
2026-11-03
GitHub AdvisoriesGHSA-m3vr-wjwg-vh63 7.5

murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that...

murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that are persisted in the database, which allows remote attackers to cause a denial of service (daemon hang or crash) via a message flood.

Record
GHSA-m3vr-wjwg-vh63
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-20
Updated
2026-11-02
OSVALPINE-CVE-2018-20743 7.5

murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that are persisted in the database, which allows remote attackers to cause a denial of service (daemon hang or crash) via a message flood.

Record
ALPINE-CVE-2018-20743
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSV 7.5

murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that are persisted in the database, which allows remote attackers to cause a denial of service (daemon hang or crash) via a message flood.

Record
CVE-2018-20743
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 7 moreShow less
OSVDEBIAN-CVE-2018-20743 7.5

murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that are persisted in the database, which allows remote attackers to cause a denial of service (daemon hang or crash) via a message flood.

Record
DEBIAN-CVE-2018-20743
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2018-20743 7.5

murmur in Mumble through 1.2.19 before 2018-08-31 mishandles multiple concurrent requests that are persisted in the database, which allows remote attackers to cause a denial of service (daemon hang or crash) via a message flood.

Record
UBUNTU-CVE-2018-20743
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVMGASA-2019-0145 No score

Updated mumble packages fix security vulnerability

It was discovered that insufficient restrictions in the connection handling of Mumble, a low latency encrypted VoIP client, could result in denial of service (CVE-2018-20743).

Record
MGASA-2019-0145
Updated
2026-11-02
OSVopenSUSE-SU-2019:1794-1 No score

Security update for mumble

This update for mumble fixes the following issues:

CVE-2018-20743: murmur mishandled multiple concurrent requests that were persisted in the database, which allowed remote attackers to cause a denial of service (daemon hang or crash) via a message flood. (boo#1123334)

Record
openSUSE-SU-2019:1794-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:1876-1 No score

Security update for mumble

This update for mumble fixes the following issues:

CVE-2018-20743: murmur mishandled multiple concurrent requests that were persisted in the database, which allowed remote attackers to cause a denial of service (daemon hang or crash) via a message flood. (boo#1123334)

This update was imported from the openSUSE:Leap:15.0:Update update project.

Record
openSUSE-SU-2019:1876-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:0137-1 No score

Security update for mumble

This update for mumble fixes the following issues:

CVE-2018-20743: murmur mishandled multiple concurrent requests that were persisted in the database, which allowed remote attackers to cause a denial of service (daemon hang or crash) via a message flood. (boo#1123334)

This update was imported from the openSUSE:Leap:15.1:Update update project.

Record
openSUSE-SU-2020:0137-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11065-1 No score

mumble-1.3.4-2.7 on GA media

These are all security issues fixed in the mumble-1.3.4-2.7 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11065-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mumble
Alpine:v3.10
 before 1.2.19-r9
1.2.19-r9
mumble
Alpine:v3.11
 before 1.2.19-r9
1.2.19-r9
mumble
Alpine:v3.12
 before 1.2.19-r9
1.2.19-r9
mumble
Alpine:v3.13
 before 1.2.19-r9
1.2.19-r9
mumble
Alpine:v3.14
 before 1.2.19-r9
1.2.19-r9
mumble
Alpine:v3.15
 before 1.2.19-r9
1.2.19-r9
mumble
Alpine:v3.16
 before 1.2.19-r9
1.2.19-r9
mumble
Alpine:v3.17
 before 1.2.19-r9
1.2.19-r9
mumble
Alpine:v3.18
 before 1.2.19-r9
1.2.19-r9
mumble
Alpine:v3.19
 before 1.2.19-r9
1.2.19-r9
Show 24 moreShow less
Affected packages
PackageAffectedFixed
mumble
Alpine:v3.20
 before 1.2.19-r9
1.2.19-r9
mumble
Alpine:v3.21
 before 1.2.19-r9
1.2.19-r9
mumble
Alpine:v3.22
 before 1.2.19-r9
1.2.19-r9
mumble
Alpine:v3.23
 before 1.2.19-r9
1.2.19-r9
mumble
Alpine:v3.24
 before 1.2.19-r9
1.2.19-r9
mumble
Alpine:v3.6
 before 1.2.19-r2
1.2.19-r2
mumble
Alpine:v3.7
 before 1.2.19-r5
1.2.19-r5
mumble
Alpine:v3.8
 before 1.2.19-r7
1.2.19-r7
mumble
Alpine:v3.9
 before 1.2.19-r9
1.2.19-r9
mumble
Debian:12
 before 1.3.0~git20190114.9fcc588+dfsg-1
1.3.0~git20190114.9fcc588+dfsg-1
mumble
Debian:13
 before 1.3.0~git20190114.9fcc588+dfsg-1
1.3.0~git20190114.9fcc588+dfsg-1
mumble
Debian:14
 before 1.3.0~git20190114.9fcc588+dfsg-1
1.3.0~git20190114.9fcc588+dfsg-1
mumble
Debian:8
 before 1.2.8-2+deb8u1, plus listed versions
1.2.8-2
1.2.8-2+deb8u1
mumble
Debian:9
 before 1.2.18-1+deb9u1, plus listed versions
1.2.18-1
1.2.18-1+deb9u1
mumble
Mageia:6
 before 1.2.19-1.1.mga6
1.2.19-1.1.mga6
mumble
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.2.8-2ubuntu11.2.12-1ubuntu11.2.12-1ubuntu1+esm1
 None known
mumble
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.2.18-11.2.19-11.2.19-1build11.2.19-1ubuntu11.2.19-1ubuntu1.1
 None known
mumble
SUSE:Package Hub 12
 before 1.2.19-bp150.3.3.1
1.2.19-bp150.3.3.1
mumble
SUSE:Package Hub 15
 before 1.2.19-bp150.3.3.1
1.2.19-bp150.3.3.1
mumble
openSUSE:Leap 15.0
 before 1.2.19-bp150.3.3.1
1.2.19-bp150.3.3.1
mumble
openSUSE:Leap 15.1
 before 1.2.19-bp150.3.3.1
1.2.19-bp150.3.3.1
mumble
SUSE:Package Hub 15 SP1
 before 1.2.19-bp151.6.3.1
1.2.19-bp151.6.3.1
mumble
SUSE:Package Hub 15 SP1
 before 1.2.19-bp151.6.6.1
1.2.19-bp151.6.6.1
mumble
openSUSE:Tumbleweed
 before 1.3.4-2.7
1.3.4-2.7

History

History
WhenChangedSources
2026-11-03affected, aliases, referencesOSV
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 17 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open