CVE-2017-9765

Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to…

published July 20, 2017

CVSS
—
EPSS
42%
Percentile
98.7
In the wild
Unconfirmed
What it is

Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via a large XML document, aka Devil's Ivy. NOTE: the large document would be blocked by many common web-server configurations on general-purpose computers.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.42081 · 98.7th percentile
Published
2017-07-20T00:00Z
EPSS history
Timeline
  • 21 OCT 03:09Z
    EPSS moved 25% → 42%
    epss
  • 20 OCT 03:10Z
    EPSS moved 25% → 42%
    epss
  • 20 JUL 00:00Z
    Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to…
    cvelistv5