Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2018:3754-1

Опубликовано: 13 нояб. 2018
Источник: suse-cvrf

Описание

Security update for icecast

This update for icecast fixes the following security issues:

  • CVE-2018-18820: A buffer overflow in url-auth could have potentially allowed remote code execution (boo#1114434)

Список пакетов

SUSE Package Hub for SUSE Linux Enterprise 15
icecast-2.4.3-bp150.3.3.1
icecast-doc-2.4.3-bp150.3.3.1

Ссылки

Описание

A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4. If the backend is enabled, then any malicious HTTP client can send a request for that specific resource including a crafted header, leading to denial of service and potentially remote code execution.

Затронутые продукты
SUSE Package Hub for SUSE Linux Enterprise 15:icecast-2.4.3-bp150.3.3.1
SUSE Package Hub for SUSE Linux Enterprise 15:icecast-doc-2.4.3-bp150.3.3.1
Ссылки
Уязвимость openSUSE-SU-2018:3754-1