CVE-2014-9091
EPSS 0.06%
Description
Icecast before 2.4.0 does not change the supplementary group privileges when <changeowner> is configured, which allows local users to gain privileges via unspecified vectors.
How to fix CVE-2014-9091
To remediate CVE-2014-9091, upgrade the affected package to a fixed version below.
- Debian/icecast2—upgrade to 2.4.0-1 or later
Is CVE-2014-9091 being exploited?
Low — EPSS is 0.1%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 2.4.0-1