Security
Security
A bug in the Icecast code handling source client URL authentication causes a Denial of Service condition.
| Package | net-misc/icecast on all architectures |
|---|---|
| Affected versions | < 2.4.2 |
| Unaffected versions | >= 2.4.2 |
Icecast is an open source alternative to shoutcast that supports mp3, ogg (vorbis/theora) and aac streaming.
When stream_auth handler is defined for URL authentication and a request is sent without login credentials, a Denial of Service condition can occur.
A remote attacker could possibly cause a Denial of Service condition.
Users of affected versions can change stream_auth mountpoints to use password authentication instead.
All icecast users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/icecast-2.4.2"
Release date
August 15, 2015
Latest revision
August 15, 2015: 1
Severity
normal
Exploitable
remote
Bugzilla entries