Lucene search
+L

Fedora Update for icecast FEDORA-2018-b881073c43

🗓️ 07 May 2019 00:00:00Reported by Copyright (C) 2019 Greenbone Networks GmbHType 
openvas
 openvas
🔗 plugins.openvas.org👁 65 Views

Fedora Update for icecast FEDORA-2018-b881073c43 advisory. Icecast streaming media server supports Ogg Vorbis and MP3 audio streams, creating Internet radio stations and jukeboxes

Related
Refs
Code
ReporterTitlePublishedViews
Family
alpinelinux
AlpineLinux
CVE-2018-18820
5 Nov 201819:00
alpinelinux
circl
Circl
CVE-2018-18820
3 Feb 202504:00
circl
cve
CVE
CVE-2018-18820
5 Nov 201819:00
cve
cvelist
Cvelist
CVE-2018-18820
5 Nov 201819:00
cvelist
debian
Debian
[SECURITY] [DLA-1588-1] icecast2 security update
26 Nov 201813:54
debian
debian
Debian
[SECURITY] [DSA 4333-1] icecast2 security update
4 Nov 201821:34
debian
debiancve
Debian CVE
CVE-2018-18820
5 Nov 201819:00
debiancve
nessus
Tenable Nessus
Debian DLA-1588-1 : icecast2 security update
27 Nov 201800:00
nessus
nessus
Tenable Nessus
Debian DSA-4333-1 : icecast2 - security update
5 Nov 201800:00
nessus
nessus
Tenable Nessus
Fedora 29 : icecast (2018-b881073c43)
3 Jan 201900:00
nessus
Rows per page
# Copyright (C) 2019 Greenbone Networks GmbH
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-or-later
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.876027");
  script_version("2021-09-01T09:01:32+0000");
  script_cve_id("CVE-2018-18820");
  script_tag(name:"cvss_base", value:"6.8");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:P/I:P/A:P");
  script_tag(name:"last_modification", value:"2021-09-01 09:01:32 +0000 (Wed, 01 Sep 2021)");
  script_tag(name:"severity_vector", value:"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2019-01-23 18:28:00 +0000 (Wed, 23 Jan 2019)");
  script_tag(name:"creation_date", value:"2019-05-07 02:32:05 +0000 (Tue, 07 May 2019)");
  script_name("Fedora Update for icecast FEDORA-2018-b881073c43");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2019 Greenbone Networks GmbH");
  script_family("Fedora Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/fedora", "ssh/login/rpms", re:"ssh/login/release=FC29");

  script_xref(name:"FEDORA", value:"2018-b881073c43");
  script_xref(name:"URL", value:"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PSEDCJ6EZEFRKAJ3SQTLMIVYMQRFWZWX");

  script_tag(name:"summary", value:"The remote host is missing an update for the 'icecast'
  package(s) announced via the FEDORA-2018-b881073c43 advisory.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");

  script_tag(name:"insight", value:"Icecast is a streaming media server which currently supports
Ogg Vorbis and MP3 audio streams.  It can be used to create an
Internet radio station or a privately running jukebox and many
things in between.  It is very versatile in that new formats
can be added relatively easily and supports open standards for
communication and interaction.");

  script_tag(name:"affected", value:"'icecast' package(s) on Fedora 29.");

  script_tag(name:"solution", value:"Please install the updated package(s).");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"package");

  exit(0);
}

include("revisions-lib.inc");
include("pkg-lib-rpm.inc");

release = rpm_get_ssh_release();
if(!release)
  exit(0);

res = "";
report = "";

if(release == "FC29") {

  if(!isnull(res = isrpmvuln(pkg:"icecast", rpm:"icecast~2.4.4~1.fc29", rls:"FC29"))) {
    report += res;
  }

  if(report != "") {
    security_message(data:report);
  } else if (__pkg_match) {
    exit(99);
  }
  exit(0);
}

exit(0);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

01 Sep 2021 00:00Current
8.1High risk
Vulners AI Score8.1
CVSS 26.8
CVSS 38.1
EPSS0.48944
65