This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2019-3804 →

DEBIAN-CVE-2019-3804

It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthent...

Original description

The description as published by the source.

It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 cockpit

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"184-1"}]}]

Debian:13 cockpit

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"184-1"}]}]

Debian:14 cockpit

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"184-1"}]}]

References

advisory security-tracker.debian.org