MGASA-2021-0263
- Source
- https://advisories.mageia.org/MGASA-2021-0263.html
- Import Source
- https://advisories.mageia.org/MGASA-2021-0263.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2021-0263
- Related
- Published
- 2021-06-16T20:22:25Z
- Modified
- 2021-06-16T19:10:10Z
- Summary
- Updated gsoap packages fix security vulnerabilities
- Details
-
A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability (CVE-2020-13574).
A denial-of-service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability (CVE-2020-13575).
A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability (CVE-2020-13576).
A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability (CVE-2020-13577).
A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability (CVE-2020-13578).
- References
-
- https://advisories.mageia.org/MGASA-2021-0263.html
- https://bugs.mageia.org/show_bug.cgi?id=29015
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13574
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13575
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13576
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13577
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13578
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/SMTJ3SJJ22SFLBLPKFADV7NVBH7UFA23/
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:7 / gsoap
Package
- Name
- gsoap
- Purl
- pkg:rpm/mageia/gsoap?distro=mageia-7
Mageia:8 / gsoap
Package
- Name
- gsoap
- Purl
- pkg:rpm/mageia/gsoap?distro=mageia-8