Denial-of-Service Vulnerability in Genivia gSOAP Plugin
CVE-2020-13574

7.5HIGH

Key Information:

Vendor

Genivia

Status
Genivia
Vendor
CVE Published:
10 February 2021

What is CVE-2020-13574?

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP version 2.8.107. This issue arises when an attacker sends a specially crafted SOAP request that can overwhelm the processing capability of the system, resulting in service disruptions. Organizations using this version are urged to apply appropriate security measures to mitigate the risk of service interruption.

Affected Version(s)

Genivia Genivia gSOAP 2.8.107

References

https://talosintelligence.com/vulnerability_reports/TALOS...
https://lists.fedoraproject.org/archives/list/package-ann...
vendor-advisory
https://lists.fedoraproject.org/archives/list/package-ann...
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

CVSS V3.0

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.