IC
Product
Icecast
14
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Icecast to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-9091 | – | Dec 10 | Icecast before 2.4.0 does not change the supplementary group privileges when <changeowner> is configured, which allows local users to gain privileges via unspecified vectors Affected: through 2.3.3 |
| CVE-2014-9018 | – | Dec 3 | Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote attackers to obtain sensitive information, related to shared file descriptors Affected: through 2.4.0 |
| CVE-2005-0838 | – | May 2 | Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possibly execute arbitrary code via (1) a long test value in an… Affected: 2.20 |
| CVE-2005-0837 | – | May 2 | IceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files via a request for a .xsl file with a trailing Affected: 2.0; 2.0.1; 2.0.2; 2.1.0; 2.2 |
| CVE-2004-1561 | – | Dec 31 | Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of headers Affected: 2.0; 2.0.1 |
| CVE-2004-0781 | – | Oct 20 | Cross-site scripting (XSS) vulnerability in list.cgi in the Icecast internal web server (icecast-server) 1.3.12 and earlier allows remote attackers to inject arbitrary web script… Affected: 1.3.0; 1.3.5; 1.3.5.1; 1.3.7; 1.3.7.1; 1.3.8; +7 more |
| CVE-2004-2027 | – | May 10 | Buffer overflow in Icecast 2.0.0 and earlier allows remote attackers to cause a denial of service (crash) via a long Basic Authorization header that triggers an out-of-bounds read Affected: 1.3.0; 1.3.5; 1.3.5.1; 1.3.7; 1.3.7.1; 1.3.8; +8 more |
| CVE-2002-1982 | – | Dec 31 | Directory traversal vulnerability in the list_directory function in Icecast 1.3.12 allows remote attackers to determine if a directory exists via a Affected: 1.3.12 |
| CVE-2002-0177 | – | Apr 22 | Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client Affected: 1.3.7; 1.3.8_beta2; 1.3.10; 1.3.11 |
| CVE-2001-0784 | – | Oct 18 | Directory traversal vulnerability in Icecast 1.3.10 and earlier allows remote attackers to read arbitrary files via a modified Affected: through 1.310; 1.3.7; 1.3.8_beta2 |
| CVE-2001-1083 | – | Jun 26 | Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of service (crash) via a URL that ends in… Affected: 1.0.0; 1.3.7; 1.3.8_beta2 |
| CVE-2001-0197 | – | Mar 26 | Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitrary commands Affected: through 1.3.8_beta2; 1.3.7 |
| CVE-2001-1230 | – | Mar 13 | Buffer overflows in Icecast before 1.3.10 allow remote attackers to cause a denial of service (crash) and execute arbitrary code Affected: through 1.3.10 |
| CVE-2001-1229 | – | Mar 12 | Buffer overflows in (1) Icecast before 1.3.9 and (2) libshout before 1.0.4 allow remote attackers to cause a denial of service (crash) and execute arbitrary code Affected: through 1.3.9 |
Showing 14