Icecast prior to 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote malicious users to cause a denial of service (NULL pointer dereference and crash) via a request without login credentials, as demonstrated by a request to "admin/killsource?mount=/test.ogg."
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
xiph icecast |
||
debian debian linux 8.0 |
||
opensuse opensuse 13.2 |
||
opensuse opensuse 13.1 |