CVE-2018-18820

2018-11-0519:29:00

Alpine Linux Development Team

security.alpinelinux.org

0.182 Low

EPSS

Percentile

96.2%

JSON

A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4. If the backend is enabled, then any malicious HTTP client can send a request for that specific resource including a crafted header, leading to denial of service and potentially remote code execution.

OSVersionArchitecturePackageVersionFilename
Alpineedge-mainnoarchicecast< 2.4.4-r0UNKNOWN
Alpine3.10-mainnoarchicecast< 2.4.4-r0UNKNOWN
Alpine3.11-mainnoarchicecast< 2.4.4-r0UNKNOWN
Alpine3.12-mainnoarchicecast< 2.4.4-r0UNKNOWN
Alpine3.13-mainnoarchicecast< 2.4.4-r0UNKNOWN
Alpine3.14-mainnoarchicecast< 2.4.4-r0UNKNOWN
Alpine3.15-mainnoarchicecast< 2.4.4-r0UNKNOWN
Alpine3.16-mainnoarchicecast< 2.4.4-r0UNKNOWN
Alpine3.17-mainnoarchicecast< 2.4.4-r0UNKNOWN
Alpine3.18-mainnoarchicecast< 2.4.4-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-main	noarch	icecast	< 2.4.4-r0	UNKNOWN
Alpine	3.10-main	noarch	icecast	< 2.4.4-r0	UNKNOWN
Alpine	3.11-main	noarch	icecast	< 2.4.4-r0	UNKNOWN
Alpine	3.12-main	noarch	icecast	< 2.4.4-r0	UNKNOWN
Alpine	3.13-main	noarch	icecast	< 2.4.4-r0	UNKNOWN
Alpine	3.14-main	noarch	icecast	< 2.4.4-r0	UNKNOWN
Alpine	3.15-main	noarch	icecast	< 2.4.4-r0	UNKNOWN
Alpine	3.16-main	noarch	icecast	< 2.4.4-r0	UNKNOWN
Alpine	3.17-main	noarch	icecast	< 2.4.4-r0	UNKNOWN
Alpine	3.18-main	noarch	icecast	< 2.4.4-r0	UNKNOWN