CVE-2018-18820: Buffer Overflow
A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4. If the backend is enabled, then any malicious HTTP client can send a request for that specific resource including a crafted header, leading to denial of service and potentially remote code execution.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-18820?
CVE-2018-18820 is a buffer overflow vulnerability in the URL-authentication backend of the Icecast server before version 2.4.4.
What is the severity of CVE-2018-18820?
CVE-2018-18820 has a severity rating of 8.1, which is considered high.
How does CVE-2018-18820 affect Icecast servers?
CVE-2018-18820 can lead to denial of service and potentially remote code execution if a malicious HTTP client sends a crafted header request to the URL-authentication backend of an Icecast server.
Which versions of Icecast are affected by CVE-2018-18820?
Icecast versions before 2.4.4 are affected by CVE-2018-18820.
How can I fix CVE-2018-18820?
To fix CVE-2018-18820, you should update your Icecast server to version 2.4.4-1 or 2.4.4-4, provided by the Debian package icecast2.