CVE-2019-7659
First published: Sat Feb 09 2019(Updated: )
Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 allows attackers to cause a denial of service (application abort) or possibly have unspecified other impact if a server application is built with the -DWITH_COOKIES flag. This affects the C/C++ libgsoapck/libgsoapck++ and libgsoapssl/libgsoapssl++ libraries, as these are built with that flag.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Genivia gSOAP | >=2.7.0<=2.7.17 | |
| Genivia gSOAP | >=2.8.0<2.8.75 | |
| Debian Debian Linux | =8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://lists.debian.org/debian-lts-announce/2019/02/msg00027.html
- https://outpost24.com/blog/gsoap-vulnerability-identified
- https://www.genivia.com/advisory.html#Bug_in_gSOAP_versions_2.7.0_to_2.8.74_for_applications_built_with_the_WITH_COOKIES_flag_enabled_(Jan_14,_2019)
- https://www.genivia.com/advisory.html#Bug_in_gSOAP_versions_2.7.0_to_2.8.74_for_applications_built_with_the_WITH_COOKIES_flag_enabled_%28Jan_14%2C_2019%29
Frequently Asked Questions
What is CVE-2019-7659?
CVE-2019-7659 is a vulnerability that allows attackers to cause a denial of service or potentially have other unspecified impacts in Genivia gSOAP 2.7.x and 2.8.x before 2.8.75.
How does CVE-2019-7659 affect Genivia gSOAP?
CVE-2019-7659 affects Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 if a server application is built with the -DWITH_COOKIES flag.
What is the severity of CVE-2019-7659?
CVE-2019-7659 has a severity rating of 8.1 (high).
How can I mitigate CVE-2019-7659?
To mitigate CVE-2019-7659, update Genivia gSOAP to version 2.8.75 or later and rebuild the server application without the -DWITH_COOKIES flag.
Where can I find more information about CVE-2019-7659?
You can find more information about CVE-2019-7659 in the Debian LTS announcement, the Outpost24 blog post, and the Genivia advisory.
- collector/nvd-index
- agent/weakness
- agent/tags
- agent/type
- agent/event
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/genivia
- canonical/genivia gsoap
- version/genivia gsoap/2.7.0
- version/genivia gsoap/2.7.17
- version/genivia gsoap/2.8.0
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/8.0