Genivia gSOAP WS-Addressing plugin code execution vulnerability

🗓️ 05 Jan 2021 00:00:00Reported by Talos IntelligenceType

talos🔗 www.talosintelligence.com👁 166 Views

A code execution vulnerability in the Genivia gSOAP 2.8.107 WS-Addressing plugin allows remote attackers to execute arbitrary code via a crafted SOAP request, triggering a buffer overflow during parsing of URI parameters

Reporter	Title	Published	Views	Family All 45
IBM Security Bulletins	Security Bulletin: Genivia gSOAP vulnerabilities affect IBM Spectrum Protect for Virtual Environments:Data Protection for VMware and Spectrum Protect Client (CVE-2020-13575, CVE-2020-13578, CVE-2020-13574, CVE-2020-13577, CVE-2020-13576, CVE-2020-21783)	15 Jun 202101:00	–	ibm
Information Security Automation	Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs	30 Dec 202218:03	–	avleonov
BDU FSTEC	The vulnerability of the WS-Addressing plugin in the gSOAP software development environment allows a perpetrator to execute arbitrary code.	16 Dec 202100:00	–	bdu_fstec
Circl	CVE-2020-13576	6 Jan 202111:05	–	circl
CNNVD	Genivia gSOAP 输入验证错误漏洞	5 Jan 202100:00	–	cnnvd
CNVD	Genivia gSOAP WS-Addressing plugin functionality remote code execution vulnerability	11 Jan 202100:00	–	cnvd
CVE	CVE-2020-13576	10 Feb 202100:00	–	cve
Cvelist	CVE-2020-13576	10 Feb 202100:00	–	cvelist
Debian	[SECURITY] [DLA 3745-1] gsoap security update	29 Feb 202423:53	–	debian
Debian CVE	CVE-2020-13576	10 Feb 202100:00	–	debiancve