CVE-2014-9018: Infoleak
Published Dec 3, 2014
·Updated
Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote attackers to obtain sensitive information, related to shared file descriptors.
Affected Software
1 affected component
Icecast Icecast<=2.4.0
Event History
Dec 3, 2014
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-9018?
CVE-2014-9018 is rated as a medium severity vulnerability due to potential exposure of sensitive information.
2
How do I fix CVE-2014-9018?
To fix CVE-2014-9018, upgrade to Icecast version 2.4.1 or later.
3
What are the risks associated with CVE-2014-9018?
The risks associated with CVE-2014-9018 include unauthorized access to sensitive data transmitted via the on-connect script.
4
Can CVE-2014-9018 be exploited remotely?
Yes, CVE-2014-9018 can be exploited remotely by attackers to obtain sensitive information.
5
Is CVE-2014-9018 a zero-day vulnerability?
No, CVE-2014-9018 is not a zero-day vulnerability as it has been publicly disclosed and a patch is available.