Icecast: Denial of service A bug in the Icecast code handling source client URL authentication causes a Denial of Service condition. icecast 2015-08-15 2015-08-15 545968 remote 2.4.2 2.4.2

Icecast is an open source alternative to shoutcast that supports mp3, ogg (vorbis/theora) and aac streaming.

When stream_auth handler is defined for URL authentication and a request is sent without login credentials, a Denial of Service condition can occur.

A remote attacker could possibly cause a Denial of Service condition.

Users of affected versions can change stream_auth mountpoints to use password authentication instead.

All icecast users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/icecast-2.4.2"
CVE-2015-3026 K_F mrueg