CVE-2017-9765
20.07.2017, 00:29
Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via a large XML document, aka Devil's Ivy. NOTE: the large document would be blocked by many common web-server configurations on general-purpose computers.Enginsight
| Vendor | Product | Version |
|---|---|---|
| genivia | gsoap | 2.7.0 |
| genivia | gsoap | 2.7.1 |
| genivia | gsoap | 2.7.2 |
| genivia | gsoap | 2.7.3 |
| genivia | gsoap | 2.7.4 |
| genivia | gsoap | 2.7.5 |
| genivia | gsoap | 2.7.6 |
| genivia | gsoap | 2.7.7 |
| genivia | gsoap | 2.7.8 |
| genivia | gsoap | 2.7.9 |
| genivia | gsoap | 2.7.10 |
| genivia | gsoap | 2.7.11 |
| genivia | gsoap | 2.7.12 |
| genivia | gsoap | 2.7.13 |
| genivia | gsoap | 2.7.14 |
| genivia | gsoap | 2.7.15 |
| genivia | gsoap | 2.7.16 |
| genivia | gsoap | 2.7.17 |
| genivia | gsoap | 2.8.0 |
| genivia | gsoap | 2.8.1 |
| genivia | gsoap | 2.8.2 |
| genivia | gsoap | 2.8.3 |
| genivia | gsoap | 2.8.4 |
| genivia | gsoap | 2.8.5 |
| genivia | gsoap | 2.8.6 |
| genivia | gsoap | 2.8.7 |
| genivia | gsoap | 2.8.8 |
| genivia | gsoap | 2.8.9 |
| genivia | gsoap | 2.8.10 |
| genivia | gsoap | 2.8.11 |
| genivia | gsoap | 2.8.12 |
| genivia | gsoap | 2.8.13 |
| genivia | gsoap | 2.8.14 |
| genivia | gsoap | 2.8.15 |
| genivia | gsoap | 2.8.16 |
| genivia | gsoap | 2.8.17 |
| genivia | gsoap | 2.8.18 |
| genivia | gsoap | 2.8.19 |
| genivia | gsoap | 2.8.20 |
| genivia | gsoap | 2.8.21 |
| genivia | gsoap | 2.8.22 |
| genivia | gsoap | 2.8.23 |
| genivia | gsoap | 2.8.24 |
| genivia | gsoap | 2.8.25 |
| genivia | gsoap | 2.8.26 |
| genivia | gsoap | 2.8.27 |
| genivia | gsoap | 2.8.28 |
| genivia | gsoap | 2.8.29 |
| genivia | gsoap | 2.8.30 |
| genivia | gsoap | 2.8.31 |
| genivia | gsoap | 2.8.32 |
| genivia | gsoap | 2.8.33 |
| genivia | gsoap | 2.8.34 |
| genivia | gsoap | 2.8.35 |
| genivia | gsoap | 2.8.36 |
| genivia | gsoap | 2.8.37 |
| genivia | gsoap | 2.8.38 |
| genivia | gsoap | 2.8.39 |
| genivia | gsoap | 2.8.40 |
| genivia | gsoap | 2.8.41 |
| genivia | gsoap | 2.8.42 |
| genivia | gsoap | 2.8.43 |
| genivia | gsoap | 2.8.44 |
| genivia | gsoap | 2.8.45 |
| genivia | gsoap | 2.8.46 |
| genivia | gsoap | 2.8.47 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| gsoap |
|
References