CVE-2020-13577

HIGH 7.5CVE-2020-13577 · Published 10/02/2021 · updated 17/06/2026

In short

CVE-2020-13577 is a HIGH (CVSS 7.5) vulnerability affecting gsoap (genivia).
Chance of exploitation in the next 30 days (EPSS): 3.0%, higher than 87.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
gsoap genivia	`= 2.8.107`	No fix yet

Description

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.

References

lists.debian.org/debian-lts-announce/2024/02/msg00015.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JINMAJB4WQASTKTNSPQL3V7YMSYPKIA2
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SMTJ3SJJ22SFLBLPKFADV7NVBH7UFA23
talosintelligence.com/vulnerability_reports/TALOS-2020-1188 · Exploit

More vulnerabilities in gsoap

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gsoap

genivia

= 2.8.107

No fix yet

More vulnerabilities in gsoap

See all →