Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2019-3804 →

DEBIAN-CVE-2019-3804

It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthent...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 cockpit

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"184-1"}]}]

Debian:13 cockpit

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"184-1"}]}]

Debian:14 cockpit

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"184-1"}]}]

Références

advisory security-tracker.debian.org