NVD

Id
24957  
Name
CVE-2015-3026  
Description
Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request without login credentials, as demonstrated by a request to "admin/killsource?mount=/test.ogg."  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2015-04-29  
Modified Date
2016-12-21  
Seq
2015-3026  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
131597 24957 CVE-2015-3026 FEDORA-2015-13106  View
131598 24957 CVE-2015-3026 FEDORA-2015-13077  View
131599 24957 CVE-2015-3026 FEDORA-2015-13083  View
131600 24957 CVE-2015-3026 openSUSE-SU-2015:0728  View
131601 24957 CVE-2015-3026 [Icecast-dev] 20150408 Icecast 2.4.2 - security release  View
131602 24957 CVE-2015-3026 DSA-3239  View
131603 24957 CVE-2015-3026 [oss-security] 20150408 Re: CVE Request for Icecast 2.3.3, 2.4.0, 2.4.1, fixed in 2.4.2  View
131604 24957 CVE-2015-3026 [oss-security] 20150408 CVE Request for Icecast 2.3.3, 2.4.0, 2.4.1, fixed in 2.4.2  View
131605 24957 CVE-2015-3026 73965  View
131606 24957 CVE-2015-3026 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=782120  View
131607 24957 CVE-2015-3026 GLSA-201508-03  View
131608 24957 CVE-2015-3026 https://trac.xiph.org/changeset/27abfbbd688df3e3077b535997330aa06603250f/icecast-server  View
131609 24957 CVE-2015-3026 https://trac.xiph.org/ticket/2191  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7205 JVNDB-2015-002525 Icecast におけるサービス運用妨害 (DoS) の脆弱性 Icecast には、stream_auth ハンドラが URL 認証に定義されている場合、サービス運用妨害 (NULL ポインタデリファレンスおよびクラッシュ) 状態にされる脆弱性が存在します。 CVE-2015-3026 80251 CVE-2015-3026 24957 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002525.html 2015-04-08 2015-05-07 View