Описание
A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4. If the backend is enabled, then any malicious HTTP client can send a request for that specific resource including a crafted header, leading to denial of service and potentially remote code execution.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 2.4.3-2ubuntu0.1 |
| cosmic | ignored | end of life |
| devel | not-affected | 2.4.4-1 |
| disco | not-affected | 2.4.4-1 |
| eoan | not-affected | 2.4.4-1 |
| esm-apps-legacy/xenial | released | 2.4.2-1ubuntu0.1 |
| esm-apps/bionic | released | 2.4.3-2ubuntu0.1 |
| esm-apps/focal | not-affected | 2.4.4-1 |
| esm-apps/xenial | released | 2.4.2-1ubuntu0.1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needs-triage] |
Показывать по
EPSS
6.8 Medium
CVSS2
8.1 High
CVSS3
Связанные уязвимости
A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4. If the backend is enabled, then any malicious HTTP client can send a request for that specific resource including a crafted header, leading to denial of service and potentially remote code execution.
A buffer overflow was discovered in the URL-authentication backend of ...
A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4. If the backend is enabled, then any malicious HTTP client can send a request for that specific resource including a crafted header, leading to denial of service and potentially remote code execution.
ALT-PU-2018-2595: package `icecast` update to version 2.4.4-alt1
EPSS
6.8 Medium
CVSS2
8.1 High
CVSS3