PT-2019-18685 · Genivia+1 · Gsoap+1

Published 2019-01-29 · Updated 2025-09-06 · CVE-2019-7659

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Genivia gSOAP versions 2.7.x through 2.8.x before 2.8.75 Genivia gSOAP version 2.8.75 and later are not affected, but the exact fixed version is specified as 2.8.75, so we list versions prior to 2.8.75 as vulnerable.

Description The issue allows attackers to cause a denial of service or possibly have other unspecified impacts on server applications built with the -DWITH COOKIES flag. This affects the C/C++ libgsoapck/libgsoapck++ and libgsoapssl/libgsoapssl++ libraries.

Recommendations For Genivia gSOAP versions 2.7.x through 2.8.x before 2.8.75, update to version 2.8.75 or later to resolve the issue. As a temporary workaround, consider disabling the -DWITH COOKIES flag in server applications until a patch is available.

Exploit

Fix

DoS

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALT-PU-2019-1132

CVE-2019-7659

DLA-1681-1

Affected Products

Alt Linux

Gsoap

References · 13

• 🔥 https://genivia.com/advisory.html#Bug_in_gSOAP_versions_2.7.0_to_2.8.74_for_applications_built_with_the_WITH_COOKIES_flag_enabled_(Jan_14,_2019) · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-7659 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-7659 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-7659 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-7659 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-7659 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-7659 · Security Note
• https://ubuntu.com/security/CVE-2019-7659 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-1681-1 · Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2019/02/msg00027.html · Note
• https://genivia.com/advisory.html#Bug_in_gSOAP_versions_2.7.0_to_2.8.74_for_applications_built_with_the_WITH_COOKIES_flag_enabled_%28Jan_14%2C_2019%29 · Note
• https://outpost24.com/blog/gsoap-vulnerability-identified · Note
• https://genivia.com/advisory.html#Bug_in_gSOAP_versions_2.7.0_to_2.8.74_for_applications_built_with_the_WITH_COOKIES_flag_enabled_ · Note