CVE-2019-7659

Genivia gSOAP 2.7.x and 2.8.x are affected by CVE-2019-7659 if a server application is built with -DWITH_COOKIES. The vulnerability exists in the C/C++ libraries libgsoapck/libgsoapck++ and libgsoapssl/libgsoapssl++ when built with that flag, enabling denial of service (application abort) and pos...

CVE-2017-9765

The affected software is Genivia gSOAP (2.7.x and 2.8.x) with versions before 2.8.48. The underlying issue is an integer overflow in the soap_get function, allowing remote attackers to execute arbitrary code or cause a denial of service via a large XML document (Devil’s Ivy). Public disclosures a...

CVE-2021-21783

CVE-2021-21783 affects Genivia gSOAP 2.8.107 in the WS-Addressing plugin. The vulnerability stems from a flaw in handling SOAP requests, enabling remote code execution when an attacker sends a crafted HTTP SOAP message. Descriptions across connected advisories corroborate that a specially crafted...

CVE-2020-13576

CVE-2020-13576 affects Genivia gSOAP 2.8.107, where the WS-Addressing plugin can be exploited by a crafted SOAP request to achieve remote code execution. Public documents confirm the root cause is in the WS-Addressing plugin, enabling code execution on a networked host. Debian LTS advisories show...

CVE-2020-13575

CVE-2020-13575 affects Genivia gSOAP 2.8.107. The WS-Addressing plugin vulnerability allows a remote attacker to trigger denial of service via a specially crafted SOAP request over HTTP, with CVSS v3.1 base score 7.5 (HIGH). Public advisories confirm fixes in multiple distributions: Debian 2.8.75...

CVE-2020-13574

Genivia gSOAP 2.8.107 contains a denial-of-service vulnerability in the WS-Security plugin. A remote attacker can trigger a specially crafted SOAP request over HTTP, causing availability impact due to a NULL pointer dereference in the WS-Security plugin. Concrete details appear in connected advis...

CVE-2020-13578

CVE-2020-13578 affects Genivia gSOAP 2.8.107, exposing a denial-of-service via the WS-Security plugin. A specially crafted SOAP request over HTTP can trigger the DoS condition. Public details in connected records confirm the vulnerability in the WS-Security plugin and indicate fixes have been rel...

CVE-2019-6973

Summary (CVE-2019-6973) : Sricam IP CCTV cameras running gSOAP 2.8.x are affected by a denial-of-service condition. The vulnerability arises from the embedded web server invoking an iterative (non-threaded) request handling model with a multi-second timeout, making the device susceptible to handl...

CVE-2020-13577

Genivia gSOAP 2.8.107 contains a denial-of-service vulnerability in the WS-Security plugin that can be triggered by a specially crafted SOAP request sent over HTTP. Multiple connected sources confirm CVE-2020-13577 and related CVEs affect gSOAP and indicate affected products and fixes. Debian LTS...

CVE-2019-25355

CVE-2019-25355 affects gSOAP 2.8, where an unauthenticated attacker can perform HTTP path traversal to access sensitive files (e.g., /etc/passwd) by sending crafted GET requests with multiple "../" sequences. Root cause is directory traversal in the HTTP path handling. Documented impact indicates...