Описание
Icecast before 2.4.0 does not change the supplementary group privileges when is configured, which allows local users to gain privileges via unspecified vectors.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 2.4.0-1 |
| esm-apps-legacy/xenial | not-affected | 2.4.0-1 |
| esm-apps/xenial | not-affected | 2.4.0-1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [2.3.3-2ubuntu1.14.04.1]] |
| lucid | ignored | end of life |
| precise | ignored | end of life |
| precise/esm | DNE | precise was needed |
| trusty | released | 2.3.3-2ubuntu1.14.04.1 |
| trusty/esm | DNE | trusty was released [2.3.3-2ubuntu1.14.04.1] |
| upstream | released | 2.4.0-1 |
Показывать по
EPSS
4.6 Medium
CVSS2
Связанные уязвимости
Icecast before 2.4.0 does not change the supplementary group privileges when <changeowner> is configured, which allows local users to gain privileges via unspecified vectors.
Icecast before 2.4.0 does not change the supplementary group privilege ...
Icecast before 2.4.0 does not change the supplementary group privileges when <changeowner> is configured, which allows local users to gain privileges via unspecified vectors.
ALT-PU-2018-1067: package `icecast` update to version 2.4.3-alt1
EPSS
4.6 Medium
CVSS2