Vulnerabilities

TI-2018-13329 CVE-2018-18820 · GHSA-w249-6p6f-4gjq

A buffer overflow was discovered in the URL-authentication backend of the Icecast before…

HIGH 66

A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.48944 Published 2018-11-05 No fix listed CWE-119

TI-2015-02667 CVE-2015-3026 · GHSA-h6hq-c5h4-8v5m

Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication…

LOW 30

Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request without login credentials, as de…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04313 Published 2015-04-29 No fix listed

TI-2011-03978 CVE-2011-4612 · GHSA-66c2-mp25-238j

icecast before 2.3.3 allows remote attackers to inject control characters such as…

LOW 27

icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.log) via a crafted URL.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02199 Published 2012-11-20 No fix listed CWE-20

Vulnerabilities

Filters

A buffer overflow was discovered in the URL-authentication backend of the Icecast before…

Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication…

icecast before 2.3.3 allows remote attackers to inject control characters such as…