Description
A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4. If the backend is enabled, then any malicious HTTP client can send a request for that specific resource including a crafted header, leading to denial of service and potentially remote code execution.
Exploits (1)
References (5)
Scores
CVSS v3
8.1
EPSS
0.6617
EPSS Percentile
98.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-119
Status
published
Products (3)
debian/debian_linux
8.0
debian/debian_linux
9.0
xiph/icecast
< 2.4.4
Published
Nov 05, 2018
Tracked Since
Feb 18, 2026