CVE-2019-3804

Description

It was found that cockpit before version 184 used glibs base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

4.307

Associated Vulnerability

Vulnerability	OS Platform
(RHSA-2019:0482)Moderate: security update cockpit-debuginfo-173.2-1.el7.i686.rpm	Linux
(RHSA-2019:0482)Moderate: security update cockpit-debuginfo-173.2-1.el7.x86_64.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234