CVE-2021-21783: Integer Overflow
A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/gsoapto a version that resolves this vulnerability.Fixed in 2.8.113-r0
Event History
Frequently Asked Questions
What is CVE-2021-21783?
CVE-2021-21783 is a code execution vulnerability in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107.
What is the severity of CVE-2021-21783?
CVE-2021-21783 has a severity rating of 9.8 (Critical).
Which software is affected by CVE-2021-21783?
Genivia gSOAP 2.8.107, Oracle Communications Diameter Signaling Router (version 8.0.0 to 8.5.0), Oracle Communications EAGLE Application Processor (version 16.1.0 to 16.4.0), Oracle Communications Eagle Lnp Application Processor (version 46.7 to 46.9), Oracle Communications Lsms (version 13.1 to 13.4), and Oracle Tekelec Virtual Operating Environment (version 3.4.0 to 3.7.1) are affected by CVE-2021-21783.
How can CVE-2021-21783 be exploited?
CVE-2021-21783 can be exploited by sending a specially crafted SOAP request to the affected software, leading to remote code execution.
Where can I find more information about CVE-2021-21783?
You can find more information about CVE-2021-21783 at the following references: [Talos Intelligence](https://talosintelligence.com/vulnerability_reports/TALOS-2021-1245), [Oracle Security Alerts - January 2022](https://www.oracle.com/security-alerts/cpujan2022.html), [Oracle Security Alerts - October 2021](https://www.oracle.com/security-alerts/cpuoct2021.html).