Unrated severityNVD Advisory· Published Apr 29, 2015· Updated May 6, 2026
CVE-2015-3026
CVE-2015-3026
Description
Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request without login credentials, as demonstrated by a request to "admin/killsource?mount=/test.ogg."
Affected products
4- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
13- trac.xiph.org/ticket/2191nvdExploitIssue Tracking
- lists.opensuse.org/opensuse-updates/2015-04/msg00030.htmlnvdThird Party Advisory
- lists.xiph.org/pipermail/icecast-dev/2015-April/002460.htmlnvdVendor Advisory
- www.debian.org/security/2015/dsa-3239nvdThird Party Advisory
- www.openwall.com/lists/oss-security/2015/04/08/11nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2015/04/08/8nvdMailing ListThird Party Advisory
- bugs.debian.org/cgi-bin/bugreport.cginvdIssue Tracking
- trac.xiph.org/changeset/27abfbbd688df3e3077b535997330aa06603250f/icecast-servernvdIssue Tracking
- lists.fedoraproject.org/pipermail/package-announce/2015-August/163859.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2015-August/164061.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2015-August/164074.htmlnvd
- www.securityfocus.com/bid/73965nvd
- security.gentoo.org/glsa/201508-03nvd
News mentions
0No linked articles in our index yet.