CVE-2021-21783
A code execution vulnerability exists in the WS-Addressing plugin func ...
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD.
Descripción
A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.13 | gsoap | 2.8.113-r0 |
| alpine 3.14 | gsoap | 2.8.113-r0 |
| alpine 3.15 | gsoap | 2.8.113-r0 |
| alpine 3.16 | gsoap | 2.8.113-r0 |
| alpine 3.17 | gsoap | 2.8.113-r0 |
| alpine 3.18 | gsoap | 2.8.113-r0 |
| alpine 3.19 | gsoap | 2.8.113-r0 |
| alpine 3.20 | gsoap | 2.8.113-r0 |
| alpine 3.21 | gsoap | 2.8.113-r0 |
| alpine 3.22 | gsoap | 2.8.113-r0 |
| alpine 3.23 | gsoap | 2.8.113-r0 |
| alpine 3.24 | gsoap | 2.8.113-r0 |
Mostrar las 21 entradas de 21 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.13 | gsoap | 2.8.113-r0 |
| alpine 3.14 | gsoap | 2.8.113-r0 |
| alpine 3.15 | gsoap | 2.8.113-r0 |
| alpine 3.16 | gsoap | 2.8.113-r0 |
| alpine 3.17 | gsoap | 2.8.113-r0 |
| alpine 3.18 | gsoap | 2.8.113-r0 |
| alpine 3.19 | gsoap | 2.8.113-r0 |
| alpine 3.20 | gsoap | 2.8.113-r0 |
| alpine 3.21 | gsoap | 2.8.113-r0 |
| alpine 3.22 | gsoap | 2.8.113-r0 |
| alpine 3.23 | gsoap | 2.8.113-r0 |
| alpine 3.24 | gsoap | 2.8.113-r0 |
| alpine edge | gsoap | 2.8.113-r0 |
| conan::GitLab Advisory Database Community | gsoap | 2.8.114 |
| debian 11 | gsoap | sin corrección indicada |
| debian 12 | gsoap | sin corrección indicada |
| debian 13 | gsoap | sin corrección indicada |
| debian 14 | gsoap | sin corrección indicada |
| echo | gsoap | sin corrección indicada |
| rapidfort debian 12 | gsoap | sin corrección indicada |
| rapidfort debian 13 | gsoap | sin corrección indicada |