PT-2019-18685 · Genivia+1 · Gsoap+1

Publicado 2019-01-29 · Atualizado 2025-09-06 · CVE-2019-7659

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Genivia gSOAP versions 2.7.x through 2.8.x before 2.8.75 Genivia gSOAP version 2.8.75 and later are not affected, but the exact fixed version is specified as 2.8.75, so we list versions prior to 2.8.75 as vulnerable.

Description The issue allows attackers to cause a denial of service or possibly have other unspecified impacts on server applications built with the -DWITH COOKIES flag. This affects the C/C++ libgsoapck/libgsoapck++ and libgsoapssl/libgsoapssl++ libraries.

Recommendations For Genivia gSOAP versions 2.7.x through 2.8.x before 2.8.75, update to version 2.8.75 or later to resolve the issue. As a temporary workaround, consider disabling the -DWITH COOKIES flag in server applications until a patch is available.

Exploit

Correção

DoS

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

ALT-PU-2019-1132

CVE-2019-7659

DLA-1681-1

Produtos afetados

Alt Linux

Gsoap

Referências · 13

• 🔥 https://genivia.com/advisory.html#Bug_in_gSOAP_versions_2.7.0_to_2.8.74_for_applications_built_with_the_WITH_COOKIES_flag_enabled_(Jan_14,_2019) · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-7659 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-7659 · Aviso do Fabricante
• https://lists.debian.org/debian-lts-announce/2019/02/msg00027.html · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-7659 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-7659 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2019-7659 · Aviso do Fabricante
• https://genivia.com/advisory.html#Bug_in_gSOAP_versions_2.7.0_to_2.8.74_for_applications_built_with_the_WITH_COOKIES_flag_enabled_%28Jan_14%2C_2019%29 · Nota
• https://cve.org/CVERecord?id=CVE-2019-7659 · Nota de Segurança
• https://ubuntu.com/security/CVE-2019-7659 · Aviso do Fabricante
• https://outpost24.com/blog/gsoap-vulnerability-identified · Nota
• https://osv.dev/vulnerability/DLA-1681-1 · Aviso do Fabricante
• https://genivia.com/advisory.html#Bug_in_gSOAP_versions_2.7.0_to_2.8.74_for_applications_built_with_the_WITH_COOKIES_flag_enabled_ · Nota