CVE-2019-7659

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.00%

Published

Feb 9, 2019

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 allows attackers to cause a denial of service (application abort) or possibly have unspecified other impact if a server application is built with the -DWITH_COOKIES flag. This affects the C/C++ libgsoapck/libgsoapck++ and libgsoapssl/libgsoapssl++ libraries, as these are built with that flag.

Weaknesses (CWE)

CWE-787

Affected Products (3)

genivia · gsoapvulnerable

genivia · gsoap (up to 2.8.75)vulnerable

debian · debian_linuxvulnerable

References (6)

https://lists.debian.org/debian-lts-announce/2019/02/msg00027.html

Mailing ListThird Party Advisory

https://outpost24.com/blog/gsoap-vulnerability-identified

https://www.genivia.com/advisory.html#Bug_in_gSOAP_versions_2.7.0_to_2.8.74_for_applications_built_with_the_WITH_COOKIES_flag_enabled_%28Jan_14%2C_2019%29

https://lists.debian.org/debian-lts-announce/2019/02/msg00027.html

Mailing ListThird Party Advisory

https://outpost24.com/blog/gsoap-vulnerability-identified

https://www.genivia.com/advisory.html#Bug_in_gSOAP_versions_2.7.0_to_2.8.74_for_applications_built_with_the_WITH_COOKIES_flag_enabled_%28Jan_14%2C_2019%29

KEV Catalog EPSS Scores Vendors All CVEs