Поиск уязвимостей
Количество 17
Количество 17
ALT-PU-2018-1067
ALT-PU-2018-1067: package `icecast` update to version 2.4.3-alt1
CVE-2011-4612
icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.log) via a crafted URL.
CVE-2011-4612
icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.log) via a crafted URL.
CVE-2011-4612
icecast before 2.3.3 allows remote attackers to inject control charact ...
GHSA-66c2-mp25-238j
icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.log) via a crafted URL.
CVE-2014-9018
Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote attackers to obtain sensitive information, related to shared file descriptors.
CVE-2014-9018
Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote attackers to obtain sensitive information, related to shared file descriptors.
CVE-2014-9018
Icecast before 2.4.1 transmits the output of the on-connect script, wh ...
GHSA-6r4c-pqmw-f493
Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote attackers to obtain sensitive information, related to shared file descriptors.
CVE-2015-3026
Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request without login credentials, as demonstrated by a request to "admin/killsource?mount=/test.ogg."
CVE-2015-3026
Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request without login credentials, as demonstrated by a request to "admin/killsource?mount=/test.ogg."
CVE-2015-3026
Icecast before 2.4.2, when a stream_auth handler is defined for URL au ...
CVE-2014-9091
Icecast before 2.4.0 does not change the supplementary group privileges when <changeowner> is configured, which allows local users to gain privileges via unspecified vectors.
CVE-2014-9091
Icecast before 2.4.0 does not change the supplementary group privileges when <changeowner> is configured, which allows local users to gain privileges via unspecified vectors.
CVE-2014-9091
Icecast before 2.4.0 does not change the supplementary group privilege ...
GHSA-h6hq-c5h4-8v5m
Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request without login credentials, as demonstrated by a request to "admin/killsource?mount=/test.ogg."
GHSA-2v9p-jv6j-hxqx
Icecast before 2.4.0 does not change the supplementary group privileges when <changeowner> is configured, which allows local users to gain privileges via unspecified vectors.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2018-1067 ALT-PU-2018-1067: package `icecast` update to version 2.4.3-alt1 | CVSS2: 5 | почти 9 лет назад | |
 | CVE-2011-4612 icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.log) via a crafted URL. | CVSS2: 5 | 2% Низкий | почти 14 лет назад |
 | CVE-2011-4612 icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.log) via a crafted URL. | CVSS2: 5 | 2% Низкий | почти 14 лет назад |
| CVE-2011-4612 icecast before 2.3.3 allows remote attackers to inject control charact ... | CVSS2: 5 | 2% Низкий | почти 14 лет назад |
| GHSA-66c2-mp25-238j icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.log) via a crafted URL. | 2% Низкий | больше 4 лет назад | |
| CVE-2014-9018 Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote attackers to obtain sensitive information, related to shared file descriptors. | CVSS2: 5 | 3% Низкий | почти 12 лет назад |
| CVE-2014-9018 Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote attackers to obtain sensitive information, related to shared file descriptors. | CVSS2: 5 | 3% Низкий | почти 12 лет назад |
| CVE-2014-9018 Icecast before 2.4.1 transmits the output of the on-connect script, wh ... | CVSS2: 5 | 3% Низкий | почти 12 лет назад |
| GHSA-6r4c-pqmw-f493 Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote attackers to obtain sensitive information, related to shared file descriptors. | 3% Низкий | больше 4 лет назад | |
| CVE-2015-3026 Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request without login credentials, as demonstrated by a request to "admin/killsource?mount=/test.ogg." | CVSS2: 5 | 4% Низкий | больше 11 лет назад |
| CVE-2015-3026 Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request without login credentials, as demonstrated by a request to "admin/killsource?mount=/test.ogg." | CVSS2: 5 | 4% Низкий | больше 11 лет назад |
| CVE-2015-3026 Icecast before 2.4.2, when a stream_auth handler is defined for URL au ... | CVSS2: 5 | 4% Низкий | больше 11 лет назад |
| CVE-2014-9091 Icecast before 2.4.0 does not change the supplementary group privileges when <changeowner> is configured, which allows local users to gain privileges via unspecified vectors. | CVSS2: 4.6 | 0% Низкий | почти 12 лет назад |
| CVE-2014-9091 Icecast before 2.4.0 does not change the supplementary group privileges when <changeowner> is configured, which allows local users to gain privileges via unspecified vectors. | CVSS2: 4.6 | 0% Низкий | почти 12 лет назад |
| CVE-2014-9091 Icecast before 2.4.0 does not change the supplementary group privilege ... | CVSS2: 4.6 | 0% Низкий | почти 12 лет назад |
| GHSA-h6hq-c5h4-8v5m Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request without login credentials, as demonstrated by a request to "admin/killsource?mount=/test.ogg." | 4% Низкий | больше 4 лет назад | |
| GHSA-2v9p-jv6j-hxqx Icecast before 2.4.0 does not change the supplementary group privileges when <changeowner> is configured, which allows local users to gain privileges via unspecified vectors. | 0% Низкий | больше 4 лет назад |
Уязвимостей на страницу