Improper input validation in Xiph Icecast
CVE-2011-4612
icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.log) via a crafted URL.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.022 (80.7th percentile) — read the EPSS interpretation.
Affected products
- Xiph Icecast
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_MISC, Issue Tracking)
- secalert@redhat.com (vendor-advisory, x_refsource_FEDORA, Third Party Advisory)
- secalert@redhat.com (vendor-advisory, x_refsource_FEDORA, Third Party Advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Patch, Vendor Advisory)