Security Advisory

CVE-2015-3026

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-04-29 20:00:00

Last updated 2024-08-06 05:32:21

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request without login credentials, as demonstrated by a request to "admin/killsource?mount=/test.ogg."

← Browse all CVEs View on cve.org ↗