Description
Buffer overflow in Icecast 2.0.0 and earlier allows remote attackers to cause a denial of service (crash) via a long Basic Authorization header that triggers an out-of-bounds read.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | icecast2 | 2.0.1.debian-1 | — |
| Debian 12 | icecast2 | 2.0.1.debian-1 | — |
References
- GLSA-200405-10 vendor-advisory
- 10311 vdb-entry
- 11578 third-party-advisory
- http://www.xiph.org/archives/icecast/7144.html
- 6075 vdb-entry
- 20040509 Icecast 2.0.0 preauth overflow mailing-list
- icecast-auth-request-bo(16103) vdb-entry