Lucene search
Veracode Vulnerability DatabaseVERACODE:29640HistoryMar 09, 2021 - 9:46 p.m.
Remote Code Execution
2021-03-0921:46:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
34
0.038 Low
EPSS
Percentile
91.9%
gsoap is vulnerable to remote code execution. The WS-Addressing plugin functionality allows an attacker to execute arbitrary code on the host OS using a malicious SOAP request.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gsoap:sid | eq | 2.8.104-2 | |
| gsoap:bullseye | eq | 2.8.104-2 | |
| gsoap:sid | eq | 2.8.104-2 | |
| gsoap:bullseye | eq | 2.8.104-2 |
References
lists.fedoraproject.org/archives/list/[email protected]/message/JINMAJB4WQASTKTNSPQL3V7YMSYPKIA2/
lists.fedoraproject.org/archives/list/[email protected]/message/SMTJ3SJJ22SFLBLPKFADV7NVBH7UFA23/
security-tracker.debian.org/tracker/CVE-2020-13576
talosintelligence.com/vulnerability_reports/TALOS-2020-1187
Related
prion
prion
Remote code execution
2021-02-10 20:15:00
cvelist
cvelist
CVE-2020-13576
2021-02-10 00:00:00
nessus
nessus
openSUSE Security Update : gsoap (openSUSE-2021-632)
2021-05-18 00:00:00
Debian dla-3745 : gsoap - security update
2024-03-01 00:00:00
Fedora 33 : gsoap (2021-faea36a9c3)
2021-03-17 00:00:00
ubuntucve
ubuntucve
CVE-2020-13576
2021-02-10 00:00:00
suse
suse
Security update for gsoap (important)
2021-05-01 00:00:00
Security update for gsoap (important)
2021-05-04 00:00:00
nvd
nvd
CVE-2020-13576
2021-02-10 20:15:14
cve
cve
CVE-2020-13576
2021-02-10 20:15:14
debiancve
debiancve
CVE-2020-13576
2021-02-10 20:15:14
gitlab
gitlab
Integer Overflow or Wraparound
2021-02-10 00:00:00
openvas
openvas
openSUSE: Security Advisory for gsoap (openSUSE-SU-2021:0632-1)
2021-05-01 00:00:00
Mageia: Security Advisory (MGASA-2021-0263)
2022-01-28 00:00:00
Debian: Security Advisory (DLA-3745-1)
2024-03-01 00:00:00
talos
talos
Genivia gSOAP WS-Addressing plugin code execution vulnerability
2021-01-05 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: gsoap-2.8.104-4.fc33
2021-03-17 02:18:38
[SECURITY] Fedora 34 Update: gsoap-2.8.104-4.fc34
2021-03-19 20:30:39
debian
debian
[SECURITY] [DLA 3745-1] gsoap security update
2024-02-29 23:53:40
mageia
mageia
Updated gsoap packages fix security vulnerabilities
2021-06-16 23:22:25
osv
osv
gsoap - security update
2024-02-29 00:00:00
ibm
ibm
avleonov
avleonov