High severity · published Jan 15, 2025
CVE-2024-4227
gSOAP: Vulnerable to specially crafted unencrypted SDC messages
7.5
CVSS
0.7%
EPSS
No
On KEV
Description
In Genivia gSOAP with a specific configuration an unauthenticated remote attacker can generate a high CPU load when forcing to parse an XML having duplicate ID attributes which can lead to a DoS.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GS
gSOAP · Genivia
2.8.24 through 2.8.132 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-4227
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-4227
sourceforge.net
https://sourceforge.net/p/gsoap2/code/HEAD/tree/changelog.md
www.genivia.com
https://www.genivia.com/advisory.html#Upgrade_recommendation_when_option_-c++11_is_used_to_generate_C++11_source_code
More from gSOAP
9.8
CVE-2021-21783
A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107
9.8
CVE-2020-13576
A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107
8.1
CVE-2019-7659
Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 allows attackers to cause a denial of service (application abort) or possibly have unspecified other impact if a server application is…
8.1
CVE-2017-9765
Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary…
7.5
CVE-2019-25355
Genivia gSOAP 2.8 - 'gSOAP' Path Traversal