CVE-2005-0838

Name	CVE-2005-0838
Description	Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possibly execute arbitrary code via (1) a long test value in an xsl:when tag, (2) a long test value in an xsl:if tag, or (3) a long select value in an xsl:value-of tag.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	301368

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
icecast2 (PTS)	jessie, jessie (lts)	2.4.0-1.1+deb8u2	vulnerable
	stretch (security), stretch (lts), stretch	2.4.2-1+deb9u1	vulnerable
	buster	2.4.4-1	vulnerable
	sid, bullseye, trixie, bookworm	2.4.4-4	vulnerable

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
icecast2	source	(unstable)	(unfixed)	unimportant		301368

According to upstream a non-issue