The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3745 advisory. A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability. (CVE-2020-13574, CVE-2020-13577, CVE-2020-13578) A denial-of-service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability. (CVE-2020-13575) A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability. (CVE-2020-13576) Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version…Read More
Debian dla-3745 : gsoap – security update
