CVE-2019-7659: High severity genivia gsoap vulnerability
Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 allows attackers to cause a denial of service (application abort) or possibly have unspecified other impact if a server application is built with the -DWITHCOOKIES flag. This affects the C/C++ libgsoapck/libgsoapck++ and libgsoapssl/libgsoapssl++ libraries, as these are built with that flag.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-7659?
CVE-2019-7659 is a vulnerability that allows attackers to cause a denial of service or potentially have other unspecified impacts in Genivia gSOAP 2.7.x and 2.8.x before 2.8.75.
How does CVE-2019-7659 affect Genivia gSOAP?
CVE-2019-7659 affects Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 if a server application is built with the -DWITH_COOKIES flag.
What is the severity of CVE-2019-7659?
CVE-2019-7659 has a severity rating of 8.1 (high).
How can I mitigate CVE-2019-7659?
To mitigate CVE-2019-7659, update Genivia gSOAP to version 2.8.75 or later and rebuild the server application without the -DWITH_COOKIES flag.
Where can I find more information about CVE-2019-7659?
You can find more information about CVE-2019-7659 in the Debian LTS announcement, the Outpost24 blog post, and the Genivia advisory.