CVE-2011-4612

EPSS 0.37%
Published 20.11.2012 00:55:00
Last modified 11.04.2025 00:51:21
Source secalert@redhat.com
Teams watchlist Login
Open Login

icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.log) via a crafted URL.

Affected products Warnungen 0 Metrics 2 CWE 1 References 7

Data is provided by the National Vulnerability Database (NVD)

Xiph ≫ Icecast Version <= 2.3.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.37%	0.561

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090668.html

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090695.html

Third Party Advisory

http://www.icecast.org/

Patch

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=768176

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2011-4612

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-4612

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-4612

EUVD