Описание
Icecast before 2.4.0 does not change the supplementary group privileges when <changeowner> is configured, which allows local users to gain privileges via unspecified vectors.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| icecast2 | fixed | 2.4.0-1 | package | |
| icecast2 | no-dsa | squeeze | package | |
| icecast2 | no-dsa | wheezy | package |
Примечания
https://trac.xiph.org/changeset/19137/
EPSS
Связанные уязвимости
Icecast before 2.4.0 does not change the supplementary group privileges when <changeowner> is configured, which allows local users to gain privileges via unspecified vectors.
Icecast before 2.4.0 does not change the supplementary group privileges when <changeowner> is configured, which allows local users to gain privileges via unspecified vectors.
Icecast before 2.4.0 does not change the supplementary group privileges when <changeowner> is configured, which allows local users to gain privileges via unspecified vectors.
ALT-PU-2018-1067: package `icecast` update to version 2.4.3-alt1
EPSS