Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-9765
HistoryJul 20, 2017 - 12:29 a.m.

Integer overflow

2017-07-2000:29:00
PRIOn knowledge base
www.prio-n.com
56

8.7 High

AI Score

Confidence

Low

0.226 Low

EPSS

Percentile

96.5%

Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via a large XML document, aka Devil’s Ivy. NOTE: the large document would be blocked by many common web-server configurations on general-purpose computers.

Rows per page:
1-10 of 661