CVE-2015-3026

Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote attackers to cause a denial of service (NULL pointer…

published April 29, 2015

CVSS
—
EPSS
4%
Percentile
91.1
In the wild
Unconfirmed
What it is

Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request without login credentials, as demonstrated by a request to "admin/killsource?mount=/test.ogg."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04313 · 91.1th percentile
Published
2015-04-29T20:00Z
EPSS history
Timeline
  • 29 APR 20:00Z
    Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote attackers to cause a denial of service (NULL pointer…
    cvelistv5