CVE-2017-9765 Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial...
HighCVSS 8.1
EPSS 42.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via a large XML document, aka Devil's Ivy. NOTE: the large document would be blocked by many common web-server configurations on general-purpose computers.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/gsoap(Debian:12) | < 2.8.48-1 | 2.8.48-1 |
| debian/gsoap(Debian:13) | < 2.8.48-1 | 2.8.48-1 |
| debian/gsoap(Debian:14) | < 2.8.48-1 | 2.8.48-1 |
| debian/r-other-x4r(Debian:12) | < 1.0.1+git20150806.c6bd9bd-2 | 1.0.1+git20150806.c6bd9bd-2 |
| debian/r-other-x4r(Debian:13) | < 1.0.1+git20150806.c6bd9bd-2 | 1.0.1+git20150806.c6bd9bd-2 |
| debian/r-other-x4r(Debian:14) | < 1.0.1+git20150806.c6bd9bd-2 | 1.0.1+git20150806.c6bd9bd-2 |
| genivia gsoap | = 2.7.0 | No fix listed |
| genivia gsoap | = 2.7.1 | No fix listed |
| genivia gsoap | = 2.7.2 | No fix listed |
| genivia gsoap | = 2.7.3 | No fix listed |
| genivia gsoap | = 2.7.4 | No fix listed |
| genivia gsoap | = 2.7.5 | No fix listed |
| genivia gsoap | = 2.7.6 | No fix listed |
| genivia gsoap | = 2.7.7 | No fix listed |
| genivia gsoap | = 2.7.8 | No fix listed |
| genivia gsoap | = 2.7.9 | No fix listed |
| genivia gsoap | = 2.7.10 | No fix listed |
| genivia gsoap | = 2.7.11 | No fix listed |
| genivia gsoap | = 2.7.12 | No fix listed |
| genivia gsoap | = 2.7.13 | No fix listed |
| genivia gsoap | = 2.7.14 | No fix listed |
| genivia gsoap | = 2.7.15 | No fix listed |
| genivia gsoap | = 2.7.16 | No fix listed |
| genivia gsoap | = 2.7.17 | No fix listed |
| genivia gsoap | = 2.8.0 | No fix listed |
Show 47 more
| Product | Affected versions | Fixed in |
|---|---|---|
| genivia gsoap | = 2.8.1 | No fix listed |
| genivia gsoap | = 2.8.2 | No fix listed |
| genivia gsoap | = 2.8.3 | No fix listed |
| genivia gsoap | = 2.8.4 | No fix listed |
| genivia gsoap | = 2.8.5 | No fix listed |
| genivia gsoap | = 2.8.6 | No fix listed |
| genivia gsoap | = 2.8.7 | No fix listed |
| genivia gsoap | = 2.8.8 | No fix listed |
| genivia gsoap | = 2.8.9 | No fix listed |
| genivia gsoap | = 2.8.10 | No fix listed |
| genivia gsoap | = 2.8.11 | No fix listed |
| genivia gsoap | = 2.8.12 | No fix listed |
| genivia gsoap | = 2.8.13 | No fix listed |
| genivia gsoap | = 2.8.14 | No fix listed |
| genivia gsoap | = 2.8.15 | No fix listed |
| genivia gsoap | = 2.8.16 | No fix listed |
| genivia gsoap | = 2.8.17 | No fix listed |
| genivia gsoap | = 2.8.18 | No fix listed |
| genivia gsoap | = 2.8.19 | No fix listed |
| genivia gsoap | = 2.8.20 | No fix listed |
| genivia gsoap | = 2.8.21 | No fix listed |
| genivia gsoap | = 2.8.22 | No fix listed |
| genivia gsoap | = 2.8.23 | No fix listed |
| genivia gsoap | = 2.8.24 | No fix listed |
| genivia gsoap | = 2.8.25 | No fix listed |
| genivia gsoap | = 2.8.26 | No fix listed |
| genivia gsoap | = 2.8.27 | No fix listed |
| genivia gsoap | = 2.8.28 | No fix listed |
| genivia gsoap | = 2.8.29 | No fix listed |
| genivia gsoap | = 2.8.30 | No fix listed |
| genivia gsoap | = 2.8.31 | No fix listed |
| genivia gsoap | = 2.8.32 | No fix listed |
| genivia gsoap | = 2.8.33 | No fix listed |
| genivia gsoap | = 2.8.34 | No fix listed |
| genivia gsoap | = 2.8.35 | No fix listed |
| genivia gsoap | = 2.8.36 | No fix listed |
| genivia gsoap | = 2.8.37 | No fix listed |
| genivia gsoap | = 2.8.38 | No fix listed |
| genivia gsoap | = 2.8.39 | No fix listed |
| genivia gsoap | = 2.8.40 | No fix listed |
| genivia gsoap | = 2.8.41 | No fix listed |
| genivia gsoap | = 2.8.42 | No fix listed |
| genivia gsoap | = 2.8.43 | No fix listed |
| genivia gsoap | = 2.8.44 | No fix listed |
| genivia gsoap | = 2.8.45 | No fix listed |
| genivia gsoap | = 2.8.46 | No fix listed |
| genivia gsoap | = 2.8.47 | No fix listed |
References
- Debian Security Tracker CVE-2017-9765 vendor-advisory
- blog.senr.io mitigation technical-description third-party-advisory
- blog.senr.io exploit technical-description third-party-advisory
- 99868 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking third-party-advisory vdb-entry
- bugzilla.suse.com issue-tracking third-party-advisory vdb-entry
- www.genivia.com
- www.genivia.com release-notes vendor-advisory