Updated icecast package fixes security vulnerability

2014-11-2620:29:06

Gentoo Foundation

advisories.mageia.org

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.027

Percentile

90.5%

JSON

Icecast did not properly handle the launching of “scripts” on connect or disconnect of sources. This could result in sensitive information from these scripts leaking to (external) clients. (CVE-2014-9018)

OSVersionArchitecturePackageVersionFilename
Mageia3noarchicecast< 2.3.2-7.1icecast-2.3.2-7.1.mga3
Mageia4noarchicecast< 2.3.2-8.1icecast-2.3.2-8.1.mga4