CVE-2020-13575: Null Pointer Dereference
A denial-of-service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-13575?
CVE-2020-13575 is a denial-of-service vulnerability that exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107.
How severe is CVE-2020-13575?
CVE-2020-13575 has a severity rating of 7.5 (high).
Which software versions are affected by CVE-2020-13575?
Genivia gSOAP 2.8.107, Fedoraproject Fedora 33, and Fedoraproject Fedora 34 are affected by CVE-2020-13575.
How can CVE-2020-13575 be exploited?
An attacker can send a specially crafted SOAP request to trigger the denial-of-service vulnerability in Genivia gSOAP 2.8.107.
Are there any references for CVE-2020-13575?
Yes, you can find more information about CVE-2020-13575 at the following references: [Link 1](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JINMAJB4WQASTKTNSPQL3V7YMSYPKIA2/), [Link 2](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SMTJ3SJJ22SFLBLPKFADV7NVBH7UFA23/), [Link 3](https://talosintelligence.com/vulnerability_reports/TALOS-2020-1186).