VULNERABILITY INTELLIGENCE
CVE-2018-18820
CVSS score8.1 HIGH
EPSS probability48.94%
CISA KEVNot currently listed
Published2018-11-05
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4. If the backend is enabled, then any malicious HTTP client can send a request for that specific resource including a crafted header, leading to denial of service and potentially remote code execution.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Primary references
- cve@mitre.org — Mailing List, Patch, Third Party Advisory
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Mitigation, Third Party Advisory
- cve@mitre.org — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory