| Package | Affected versions | Patched versions |
|---|---|---|
| cockpit | < 184 | 184 |
| virtualization | = 4.0 |
It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free