VULNERABILITY INTELLIGENCE

CVE-2014-9091

CVSS score4.6 NONE
EPSS probability0.49%
CISA KEVNot currently listed
Published2014-12-10
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Icecast before 2.4.0 does not change the supplementary group privileges when <changeowner> is configured, which allows local users to gain privileges via unspecified vectors.

Weakness classification

  • nvd@nist.gov: CWE-264

Primary references