Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2017-0221
HistoryJul 26, 2017 - 1:07 a.m.

Updated gsoap packages fix security vulnerability

2017-07-2601:07:12
Gentoo Foundation
advisories.mageia.org
122

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

0.226 Low

EPSS

Percentile

96.5%

JSON

A potential vulnerability to a large and specific XML message over 2GB in size (greater than 2147483711 bytes to trigger the software bug). A buffer overflow can cause an open unsecured server to crash or malfunction after 2GB is received (CVE-2017-9765).

OSVersionArchitecturePackageVersionFilename
Mageia5noarchgsoap< 2.8.49-1gsoap-2.8.49-1.mga5
Mageia6noarchgsoap< 2.8.49-1gsoap-2.8.49-1.mga6

Related

hp 1
nessus 6
ubuntucve 1
osv 1
prion 1
krebs 1
openvas 5
cvelist 1
debian 1
myhack58 1
fedora 3
checkpoint_advisories 1
seebug 1
ics 1
thn 2
cve 1
nvd 1
freebsd 1
debiancve 1
hp
hp
HPSBPI03566 Rev 3 - HP DesignJet, OfficeJet, LaserJet, PageWide, Photosmart Printers, Execution of Arbitrary Code or Denial of Service
2017-09-19 00:00:00
nessus
nessus
FreeBSD : gsoap -- remote code execution via via overflow (8745c67e-7dd1-4165-96e2-fcf9da2dc5b5) (Devil's Ivy)
2017-07-26 00:00:00
openSUSE Security Update : gsoap (openSUSE-2017-842) (Devil's Ivy)
2017-07-27 00:00:00
AXIS gSOAP Message Handling RCE (ACV-116267) (Devil's Ivy)
2017-07-19 00:00:00
ubuntucve
ubuntucve
CVE-2017-9765
2017-07-20 00:00:00
osv
osv
gsoap - security update
2017-07-24 00:00:00
prion
prion
Integer overflow
2017-07-20 00:29:00
krebs
krebs
Experts in Lather Over ‘gSOAP’ Security Flaw
2017-07-18 14:30:11
openvas
openvas
Mageia: Security Advisory (MGASA-2017-0221)
2022-01-28 00:00:00
Fedora Update for gsoap FEDORA-2017-d2174c28ed
2017-08-12 00:00:00
Debian: Security Advisory (DLA-1036-1)
2018-02-07 00:00:00
cvelist
cvelist
CVE-2017-9765
2017-07-20 00:00:00
debian
debian
[SECURITY] [DLA 1036-1] gsoap security update
2017-07-24 19:19:17
myhack58
myhack58
gSOAP open-source software development library aeration“green rose”vulnerability, millions of IoT devices in jeopardy-vulnerability warning-the black bar safety net
2017-07-20 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: gsoap-2.8.30-2.fc25
2017-08-10 21:27:30
[SECURITY] Fedora 26 Update: gsoap-2.8.43-3.fc26
2018-04-27 23:00:00
[SECURITY] Fedora 26 Update: gsoap-2.8.43-2.fc26
2017-08-10 16:56:38
checkpoint_advisories
checkpoint_advisories
Genivia gSOAP Buffer Overflow (CVE-2017-9765)
2021-01-20 00:00:00
seebug
seebug
Devil's Ivy vulnerability(CVE-2017-9765)
2017-07-19 00:00:00
ics
ics
OSIsoft PI SQL Client
2019-09-10 12:00:00
thn
thn
Remotely Exploitable Flaw Puts Millions of Internet-Connected Devices at Risk
2017-07-18 07:04:00
THN Weekly Roundup — 10 Most Important Stories You Shouldn't Miss
2017-07-22 02:35:00
cve
cve
CVE-2017-9765
2017-07-20 00:29:00
nvd
nvd
CVE-2017-9765
2017-07-20 00:29:00
freebsd
freebsd
gsoap -- remote code execution via via overflow
2017-07-18 00:00:00
debiancve
debiancve
CVE-2017-9765
2017-07-20 00:29:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

0.226 Low

EPSS

Percentile

96.5%

JSON
Related for MGASA-2017-0221
hp1nessus6ubuntucve1osv1prion1krebs1openvas5cvelist1debian1myhack581fedora3checkpoint_advisories1seebug1ics1thn2cve1nvd1freebsd1debiancve1