Описание
A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4. If the backend is enabled, then any malicious HTTP client can send a request for that specific resource including a crafted header, leading to denial of service and potentially remote code execution.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 2.4.3-2ubuntu0.1 |
| cosmic | ignored | end of life |
| devel | not-affected | 2.4.4-1 |
| disco | not-affected | 2.4.4-1 |
| eoan | not-affected | 2.4.4-1 |
| esm-apps/bionic | released | 2.4.3-2ubuntu0.1 |
| esm-apps/focal | not-affected | 2.4.4-1 |
| esm-apps/xenial | released | 2.4.2-1ubuntu0.1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needs-triage] |
| focal | not-affected | 2.4.4-1 |
Показывать по
6.8 Medium
CVSS2
8.1 High
CVSS3
Связанные уязвимости
A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4. If the backend is enabled, then any malicious HTTP client can send a request for that specific resource including a crafted header, leading to denial of service and potentially remote code execution.
A buffer overflow was discovered in the URL-authentication backend of ...
A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4. If the backend is enabled, then any malicious HTTP client can send a request for that specific resource including a crafted header, leading to denial of service and potentially remote code execution.
6.8 Medium
CVSS2
8.1 High
CVSS3