CVE-2014-9018

EUVD-2014-8846
Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote attackers to obtain sensitive information, related to shared file descriptors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 73%
Affected Products (NVD)
VendorProductVersion
icecasticecast
𝑥
≤ 2.4.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
icecast2
bookworm
2.4.4-4
fixed
bullseye
2.4.4-4
fixed
sid
2.4.4-4
fixed
squeeze
no-dsa
trixie
2.4.4-4
fixed
wheezy
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
icecast2
lucid
ignored
precise
ignored
trusty
Fixed 2.3.3-2ubuntu1.14.04.1
released
utopic
Fixed 2.3.3-2ubuntu1.14.10.1
released
vivid
not-affected
wily
not-affected
xenial
not-affected
yakkety
not-affected
zesty
not-affected
Common Weakness Enumeration
References
http://icecast.org/news/icecast-release-2_4_1/
http://lists.opensuse.org/opensuse-updates/2014-12/msg00038.html
http://www.mandriva.com/security/advisories?name=MDVSA-2014:231
http://www.openwall.com/lists/oss-security/2014/11/19/23
http://www.openwall.com/lists/oss-security/2014/11/20/22
http://www.securityfocus.com/bid/71312
https://exchange.xforce.ibmcloud.com/vulnerabilities/98991
https://trac.xiph.org/ticket/2087
https://trac.xiph.org/ticket/2089
http://icecast.org/news/icecast-release-2_4_1/
http://lists.opensuse.org/opensuse-updates/2014-12/msg00038.html
http://www.mandriva.com/security/advisories?name=MDVSA-2014:231
http://www.openwall.com/lists/oss-security/2014/11/19/23
http://www.openwall.com/lists/oss-security/2014/11/20/22
http://www.securityfocus.com/bid/71312
https://exchange.xforce.ibmcloud.com/vulnerabilities/98991
https://trac.xiph.org/ticket/2087
https://trac.xiph.org/ticket/2089