CVE-2015-3026

Icecast before 2.4.2, when a streamauth handler is defined for URL authentication, allows remote attackers to cause a denial of service NULL pointer dereference and crash via a request without login credentials, as demonstrated by a request to "admin/killsource?mount=/test.ogg."...

PT-2015-6056

Name of the Vulnerable Software and Affected Versions Icecast versions prior to 2.4.2 Description The issue allows remote attackers to cause a denial of service, resulting in a crash due to a NULL pointer dereference. This can be achieved by sending a request without login credentials to a specif...