CVE-2015-3026

概要

参考情報

• lists.fedoraproject.org/pipermail/package-announce/2015-August/163859.html
• lists.fedoraproject.org/pipermail/package-announce/2015-August/164061.html
• lists.fedoraproject.org/pipermail/package-announce/2015-August/164074.html
• lists.opensuse.org/opensuse-updates/2015-04/msg00030.html · Third Party Advisory
• lists.xiph.org/pipermail/icecast-dev/2015-April/002460.html · Vendor Advisory
• debian.org/security/2015/dsa-3239 · Third Party Advisory
• openwall.com/lists/oss-security/2015/04/08/11 · Mailing List
• openwall.com/lists/oss-security/2015/04/08/8 · Mailing List
• securityfocus.com/bid/73965
• bugs.debian.org/cgi-bin/bugreport.cgi · Issue Tracking
• security.gentoo.org/glsa/201508-03
• trac.xiph.org/changeset/27abfbbd688df3e3077b535997330aa06603250f/icecast-server

icecast のその他の脆弱性

• CVE-2018-18820高 8.1A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4. If the backend is enabled, then any maliciou…
• CVE-2011-4612中 5.0icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.log) via a crafted URL.