Lucene search
Veracode Vulnerability DatabaseVERACODE:20130HistoryMay 16, 2019 - 3:57 a.m.
Denial Of Service (DoS)
2019-05-1603:57:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.004 Low
EPSS
Percentile
73.7%
Cockpit is vulnerable to denial of service (DoS) attacks. The vulnerability exists because cockpit uses glib’s base64 decode functionality incorrectly. An unauthenticated attacker could cause the service to crash by sending a specially crafted request with an invalid base64-encoded cookie.
References
access.redhat.com/errata/RHSA-2019:0482
access.redhat.com/errata/RHSA-2019:1569
access.redhat.com/errata/RHSA-2019:1571
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3804
github.com/cockpit-project/cockpit/commit/c51f6177576d7e12
github.com/cockpit-project/cockpit/pull/10819
Related
nessus
nessus
RHEL 7 : Virtualization Manager (RHSA-2019:1569)
2019-06-21 00:00:00
Scientific Linux Security Update : cockpit on SL7.x x86_64 (20190313)
2019-03-14 00:00:00
Oracle Linux 7 : cockpit (ELSA-2019-0482)
2019-03-13 00:00:00
cvelist
cvelist
CVE-2019-3804
2019-03-26 00:00:00
ubuntucve
ubuntucve
CVE-2019-3804
2019-03-26 00:00:00
redhat
redhat
(RHSA-2019:0482) Moderate: cockpit security update
2019-03-12 08:20:54
oraclelinux
oraclelinux
cockpit security update
2019-03-12 00:00:00
centos
centos
cockpit security update
2019-03-19 14:34:21
debiancve
debiancve
CVE-2019-3804
2019-03-26 18:29:00
osv
osv
CVE-2019-3804
2019-03-26 18:29:00
nvd
nvd
CVE-2019-3804
2019-03-26 18:29:00
openvas
openvas
CentOS Update for cockpit CESA-2019:0482 centos7
2019-03-21 00:00:00
Huawei EulerOS: Security Advisory for cockpit (EulerOS-SA-2020-1143)
2020-02-25 00:00:00
cve
cve
CVE-2019-3804
2019-03-26 18:29:00
prion
prion
Design/Logic Flaw
2019-03-26 18:29:00
redhatcve
redhatcve
CVE-2019-3804
2020-04-03 01:51:26