Vendors / xiph Records 18 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 5
Exploited now xiph records in CISA KEV No xiph vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 66
A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4.
CVSS 3.0 HIGH 8.1· Network · No auth · No interaction · EPSS 0.48944 · Published 2018-11-05 · No fix listed CWE-119
Priority LOW 30
Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request without login credentials, as de…
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04313 · Published 2015-04-29 · No fix listed
Priority LOW 27
icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.log) via a crafted URL.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02199 · Published 2012-11-20 · No fix listed CWE-20
Open these records in search → All records by CVSS severity
3 5 10 0 0
THREATIST.IORead the docs