Candidate: CVE-2019-7659
PublicDate: 2019-02-09 14:29:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7659
 https://www.genivia.com/advisory.html#Bug_in_gSOAP_versions_2.7.0_to_2.8.74_for_applications_built_with_the_WITH_COOKIES_flag_enabled_
 https://www.genivia.com/advisory.html#Bug_in_gSOAP_versions_2.7.0_to_2.8.74_for_applications_built_with_the_WITH_COOKIES_flag_enabled_(Jan_14,_2019)
Description:
 Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 allows attackers to cause a
 denial of service (application abort) or possibly have unspecified other
 impact if a server application is built with the -DWITH_COOKIES flag. This
 affects the C/C++ libgsoapck/libgsoapck++ and libgsoapssl/libgsoapssl++
 libraries, as these are built with that flag.
Ubuntu-Description:
Notes:
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H [8.1 HIGH]


Patches_gsoap:
upstream_gsoap: released (2.8.75-1)
precise/esm_gsoap: DNE
trusty_gsoap: ignored (reached end-of-life)
trusty/esm_gsoap: DNE (trusty was needed)
xenial_gsoap: ignored (end of standard support, was needed)
bionic_gsoap: needed
cosmic_gsoap: ignored (reached end-of-life)
disco_gsoap: not-affected (2.8.75-1)
eoan_gsoap: not-affected (2.8.75-1)
focal_gsoap: not-affected (2.8.75-1)
groovy_gsoap: not-affected (2.8.75-1)
hirsute_gsoap: not-affected (2.8.75-1)
impish_gsoap: not-affected (2.8.75-1)
jammy_gsoap: not-affected (2.8.75-1)
devel_gsoap: not-affected (2.8.75-1)