CVE-2019-3804 - It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly res

CVE-2019-3804

Summary

It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash.

References

Vulnerable Configurations

cpe:2.3:a:cockpit-project:cockpit:0.0.1:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.0.1:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.2:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.2:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.3:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.3:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.4:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.4:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.5:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.5:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.6:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.6:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.7:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.7:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.8:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.8:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.9:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.9:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.10:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.10:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.11:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.11:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.12:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.12:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.13:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.13:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.14:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.14:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.15:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.15:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.16:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.16:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.17:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.17:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.18:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.18:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.19:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.19:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.20:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.20:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.21:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.21:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.22:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.22:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.23:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.23:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.24:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.24:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.25:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.25:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.26:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.26:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.27:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.27:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.28:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.28:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.29:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.29:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.30:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.30:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.31:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.31:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.32:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.32:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.33:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.33:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.34:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.34:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.35:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.35:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.36:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.36:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.37:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.37:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.38:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.38:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.39:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.39:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.40:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.40:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.41:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.41:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.42:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.42:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.43:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.43:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.44:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.44:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.45:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.45:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.46:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.46:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.47:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.47:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.48:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.48:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.49:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.49:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.50:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.50:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.51:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.51:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.52:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.52:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.53:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.53:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.54:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.54:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.55:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.55:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.56:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.56:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.57:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.57:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.58:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.58:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.59:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.59:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.60:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.60:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.61:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.61:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.62:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.62:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.63:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.63:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.64:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.64:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.65:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.65:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.66:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.66:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.67:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.67:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.68:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.68:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.69:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.69:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.70:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.70:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.71:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.71:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.72:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.72:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.73:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.73:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.74:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.74:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.75:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.75:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.76:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.76:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.77:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.77:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.78:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.78:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.79:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.79:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.80:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.80:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.81:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.81:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.82:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.82:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.83:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.83:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.84:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.84:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.85:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.85:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.86:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.86:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.87:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.87:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.88:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.88:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.89:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.89:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.90:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.90:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.91:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.91:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.92:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.92:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.93:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.93:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.94:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.94:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.95:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.95:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.96:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.96:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.97:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.97:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.98:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.98:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.99:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.99:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.100:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.100:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.101:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.101:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.102:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.102:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.103:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.103:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.104:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.104:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.105:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.105:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.106:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.106:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.107:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.107:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.108:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.108:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.109:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.109:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.110:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.110:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.111:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.111:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.112:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.112:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.113:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.113:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.114:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.114:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.115:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.115:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.116:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.116:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.117:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:0.117:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:118:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:118:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:119:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:119:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:120:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:120:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:121:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:121:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:122:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:122:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:123:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:123:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:124:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:124:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:125:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:125:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:126:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:126:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:127:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:127:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:128:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:128:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:129:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:129:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:130:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:130:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:131:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:131:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:132:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:132:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:133:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:133:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:134:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:134:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:135:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:135:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:136:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:136:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:137:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:137:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:138:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:138:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:139:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:139:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:140:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:140:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:141:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:141:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:142:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:142:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:143:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:143:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:144:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:144:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:145:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:145:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:146:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:146:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:147:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:147:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:148:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:148:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:149:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:149:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:150:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:150:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:151:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:151:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:152:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:152:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:153:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:153:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:154:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:154:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:155:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:155:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:156:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:156:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:157:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:157:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:158:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:158:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:159:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:159:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:160:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:160:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:161:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:161:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:162:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:162:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:163:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:163:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:164:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:164:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:165:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:165:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:166:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:166:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:167:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:167:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:168:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:168:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:169:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:169:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:170:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:170:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:171:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:171:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:172:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:172:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:173:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:173:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:173.1:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:173.1:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:173.2:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:173.2:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:174:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:174:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:175:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:175:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:176:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:176:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:177:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:177:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:178:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:178:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:179:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:179:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:180:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:180:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:181:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:181:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:182:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:182:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:183:*:*:*:*:*:*:*
cpe:2.3:a:cockpit-project:cockpit:183:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:-:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 07-11-2022 - 19:03)
Impact:
Exploitability:

CWE

CWE-909

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:N/A:P

redhat via4

advisories

bugzilla

id	1663567
title	CVE-2019-3804 cockpit: Crash when parsing invalid base64 headers

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 7 is installed
oval oval:com.redhat.rhba:tst:20150364027

AND
comment cockpit is earlier than 0:173.2-1.el7
oval oval:com.redhat.rhsa:tst:20190482001
comment cockpit is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20190482002

AND

comment cockpit-bridge is earlier than 0:173.2-1.el7
oval oval:com.redhat.rhsa:tst:20190482003
comment cockpit-bridge is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20190482004

AND
comment cockpit-doc is earlier than 0:173.2-1.el7
oval oval:com.redhat.rhsa:tst:20190482005
comment cockpit-doc is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20190482006

AND

comment cockpit-machines-ovirt is earlier than 0:173.2-1.el7
oval oval:com.redhat.rhsa:tst:20190482007
comment cockpit-machines-ovirt is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20190482008

AND

comment cockpit-system is earlier than 0:173.2-1.el7
oval oval:com.redhat.rhsa:tst:20190482009
comment cockpit-system is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20190482010

AND
comment cockpit-ws is earlier than 0:173.2-1.el7
oval oval:com.redhat.rhsa:tst:20190482011
comment cockpit-ws is signed with Red Hat redhatrelease2 key
oval oval:com.redhat.rhsa:tst:20190482012

rhsa

id	RHSA-2019:0482
released	2019-03-13
severity	Moderate
title	RHSA-2019:0482: cockpit security update (Moderate)

rhsa
id RHSA-2019:1569
rhsa
id RHSA-2019:1571

rpms

cockpit-0:173.2-1.el7
cockpit-bridge-0:173.2-1.el7
cockpit-debuginfo-0:173.2-1.el7
cockpit-doc-0:173.2-1.el7
cockpit-machines-ovirt-0:173.2-1.el7
cockpit-system-0:173.2-1.el7
cockpit-ws-0:173.2-1.el7
redhat-release-virtualization-host-0:4.3-0.8.el7
redhat-virtualization-host-image-update-0:4.3-20190610.0.el7_6
redhat-virtualization-host-image-update-placeholder-0:4.3-0.8.el7
rhvm-appliance-2:4.3-20190605.0.el7

refmap via4

confirm

Last major update

07-11-2022 - 19:03

Published

26-03-2019 - 18:29

Last modified

07-11-2022 - 19:03