CVE-2018-18820

Icecast contains a buffer overflow in the URL-auth backend prior to 2.4.4. When URL authentication is enabled, a crafted HTTP header can trigger a denial of service and potentially remote code execution. Public advisories from multiple distros (openSUSE, Fedora, Debian) indicate that updates addr...

CVE-2018-18820

A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4. If the backend is enabled, then any malicious HTTP client can send a request for that specific resource including a crafted header, leading to denial of service and potentially remote code execution...

backroadsandbeyondradio.com XSS vulnerability

Vulnerable URL: http://backroadsandbeyondradio.com/wp-content/plugins/shoutcast-icecast-html5-radio-player/html5/html5shoutcast.php?id=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.201...

Icecast Media Server Detection via HTTP Streaming

Binary data 9157.prm...

Icecast Media Server Version Detection

Binary data 9159.prm...

Gentoo Security Advisory GLSA 201412-38

Gentoo Linux Local Security Checks GLSA 201412-38 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Fedora 21 : icecast-2.4.2-1.fc21 (2015-13077)

update to 2.4.2 - fix CVE-2015-3026 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora Update for icecast FEDORA-2015-13083

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 22 : icecast-2.4.2-1.fc22 (2015-13083)

update to 2.4.2 - fix CVE-2015-3026 - use %license on Fedora 22+ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora Update for icecast FEDORA-2015-13077

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 22 Update: icecast-2.4.2-1.fc22

Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...

[SECURITY] Fedora 21 Update: icecast-2.4.2-1.fc21

Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...

GLSA-201508-03 : Icecast: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201508-03 Icecast: Denial of Service When streamauth handler is defined for URL authentication and a request is sent without login credentials, a Denial of Service condition can occur. Impact : A remote attacker could possibly cau...

Fedora 23 : icecast-2.4.2-1.fc23 (2015-13106)

update to 2.4.2 - fix CVE-2015-3026 - use %license on Fedora 22+ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

[SECURITY] Fedora 23 Update: icecast-2.4.2-1.fc23

Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...

Icecast: Denial of service

Background Icecast is an open source alternative to shoutcast that supports mp3, ogg vorbis/theora and aac streaming. Description When streamauth handler is defined for URL authentication and a request is sent without login credentials, a Denial of Service condition can occur. Impact A remote...

Icecast 'stream_auth' handler DoS Vulnerability

Icecast is prone to remote denial of service DoS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:icecast:icecast";...

icecast DoS

NULL pointer dereference on authentication by URL...

Icecast Remote Denial of Service Vulnerability

Icecast is an open source streaming project and an audio streaming server. Icecast suffers from a remote denial-of-service vulnerability, which allows remote attackers to exploit the vulnerability to crash the application...

CVE-2015-3026

Icecast before 2.4.2, when a streamauth handler is defined for URL authentication, allows remote attackers to cause a denial of service NULL pointer dereference and crash via a request without login credentials, as demonstrated by a request to "admin/killsource?mount=/test.ogg."...