Vulnerabilities > CVE-2020-13574 - NULL Pointer Dereference vulnerability in multiple products

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
genivia
fedoraproject
CWE-476
NVD
Published: 2021-02-10
Updated: 2024-03-01

Summary

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.

Vulnerable Configurations

Part Description Count
Application
Genivia
1
OS
Fedoraproject
2

Common Weakness Enumeration (CWE)

References