A bug in the Icecast code handling source client URL authentication causes a Denial of Service condition.
|Package||net-misc/icecast on all architectures|
|Affected versions||< 2.4.2|
|Unaffected versions||>= 2.4.2|
Icecast is an open source alternative to shoutcast that supports mp3, ogg (vorbis/theora) and aac streaming.
When stream_auth handler is defined for URL authentication and a request is sent without login credentials, a Denial of Service condition can occur.
A remote attacker could possibly cause a Denial of Service condition.
Users of affected versions can change stream_auth mountpoints to use password authentication instead.
All icecast users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/icecast-2.4.2"
August 15, 2015
August 15, 2015: 1