ID CVE-2019-3804
Summary It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash.
References
Vulnerable Configurations
  • cpe:2.3:a:cockpit-project:cockpit:0.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.2:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.3:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.4:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.5:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.6:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.7:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.8:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.9:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.10:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.10:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.11:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.11:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.12:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.12:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.13:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.13:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.14:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.14:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.15:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.15:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.16:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.16:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.17:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.17:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.18:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.18:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.19:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.19:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.20:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.20:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.21:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.21:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.22:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.22:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.23:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.23:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.24:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.24:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.25:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.25:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.26:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.26:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.27:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.27:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.28:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.28:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.29:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.29:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.30:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.30:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.31:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.31:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.32:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.32:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.33:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.33:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.34:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.34:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.35:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.35:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.36:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.36:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.37:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.37:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.38:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.38:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.39:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.39:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.40:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.40:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.41:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.41:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.42:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.42:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.43:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.43:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.44:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.44:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.45:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.45:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.46:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.46:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.47:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.47:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.48:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.48:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.49:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.49:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.50:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.50:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.51:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.51:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.52:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.52:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.53:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.53:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.54:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.54:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.55:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.55:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.56:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.56:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.57:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.57:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.58:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.58:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.59:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.59:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.60:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.60:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.61:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.61:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.62:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.62:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.63:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.63:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.64:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.64:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.65:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.65:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.66:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.66:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.67:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.67:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.68:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.68:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.69:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.69:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.70:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.70:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.71:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.71:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.72:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.72:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.73:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.73:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.74:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.74:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.75:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.75:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.76:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.76:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.77:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.77:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.78:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.78:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.79:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.79:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.80:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.80:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.81:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.81:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.82:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.82:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.83:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.83:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.84:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.84:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.85:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.85:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.86:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.86:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.87:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.87:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.88:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.88:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.89:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.89:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.90:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.90:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.91:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.91:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.92:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.92:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.93:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.93:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.94:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.94:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.95:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.95:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.96:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.96:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.97:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.97:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.98:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.98:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.99:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.99:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.100:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.100:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.101:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.101:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.102:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.102:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.103:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.103:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.104:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.104:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.105:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.105:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.106:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.106:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.107:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.107:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.108:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.108:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.109:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.109:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.110:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.110:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.111:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.111:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.112:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.112:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.113:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.113:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.114:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.114:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.115:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.115:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.116:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.116:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:0.117:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:0.117:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:1.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:1.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:1.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:1.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:1.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:1.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:118:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:118:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:119:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:119:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:120:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:120:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:121:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:121:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:122:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:122:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:123:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:123:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:124:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:124:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:125:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:125:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:126:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:126:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:127:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:127:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:128:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:128:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:129:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:129:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:130:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:130:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:131:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:131:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:132:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:132:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:133:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:133:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:134:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:134:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:135:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:135:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:136:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:136:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:137:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:137:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:138:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:138:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:139:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:139:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:140:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:140:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:141:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:141:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:142:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:142:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:143:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:143:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:144:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:144:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:145:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:145:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:146:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:146:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:147:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:147:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:148:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:148:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:149:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:149:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:150:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:150:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:151:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:151:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:152:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:152:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:153:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:153:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:154:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:154:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:155:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:155:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:156:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:156:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:157:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:157:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:158:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:158:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:159:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:159:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:160:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:160:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:161:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:161:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:162:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:162:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:163:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:163:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:164:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:164:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:165:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:165:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:166:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:166:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:167:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:167:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:168:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:168:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:169:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:169:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:170:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:170:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:171:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:171:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:172:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:172:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:173:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:173:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:173.1:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:173.1:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:173.2:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:173.2:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:174:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:174:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:175:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:175:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:176:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:176:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:177:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:177:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:178:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:178:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:179:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:179:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:180:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:180:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:181:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:181:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:182:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:182:*:*:*:*:*:*:*
  • cpe:2.3:a:cockpit-project:cockpit:183:*:*:*:*:*:*:*
    cpe:2.3:a:cockpit-project:cockpit:183:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:-:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:-:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 29-10-2021 - 19:25)
Impact:
Exploitability:
CWE CWE-909
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
redhat via4
advisories
  • bugzilla
    id 1663567
    title CVE-2019-3804 cockpit: Crash when parsing invalid base64 headers
    oval
    OR
    • comment Red Hat Enterprise Linux must be installed
      oval oval:com.redhat.rhba:tst:20070304026
    • AND
      • comment Red Hat Enterprise Linux 7 is installed
        oval oval:com.redhat.rhba:tst:20150364027
      • OR
        • AND
          • comment cockpit is earlier than 0:173.2-1.el7
            oval oval:com.redhat.rhsa:tst:20190482001
          • comment cockpit is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20190482002
        • AND
          • comment cockpit-bridge is earlier than 0:173.2-1.el7
            oval oval:com.redhat.rhsa:tst:20190482003
          • comment cockpit-bridge is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20190482004
        • AND
          • comment cockpit-doc is earlier than 0:173.2-1.el7
            oval oval:com.redhat.rhsa:tst:20190482005
          • comment cockpit-doc is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20190482006
        • AND
          • comment cockpit-machines-ovirt is earlier than 0:173.2-1.el7
            oval oval:com.redhat.rhsa:tst:20190482007
          • comment cockpit-machines-ovirt is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20190482008
        • AND
          • comment cockpit-system is earlier than 0:173.2-1.el7
            oval oval:com.redhat.rhsa:tst:20190482009
          • comment cockpit-system is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20190482010
        • AND
          • comment cockpit-ws is earlier than 0:173.2-1.el7
            oval oval:com.redhat.rhsa:tst:20190482011
          • comment cockpit-ws is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20190482012
    rhsa
    id RHSA-2019:0482
    released 2019-03-13
    severity Moderate
    title RHSA-2019:0482: cockpit security update (Moderate)
  • rhsa
    id RHSA-2019:1569
  • rhsa
    id RHSA-2019:1571
rpms
  • cockpit-0:173.2-1.el7
  • cockpit-bridge-0:173.2-1.el7
  • cockpit-debuginfo-0:173.2-1.el7
  • cockpit-doc-0:173.2-1.el7
  • cockpit-machines-ovirt-0:173.2-1.el7
  • cockpit-system-0:173.2-1.el7
  • cockpit-ws-0:173.2-1.el7
  • redhat-release-virtualization-host-0:4.3-0.8.el7
  • redhat-virtualization-host-image-update-0:4.3-20190610.0.el7_6
  • redhat-virtualization-host-image-update-placeholder-0:4.3-0.8.el7
  • rhvm-appliance-2:4.3-20190605.0.el7
refmap via4
confirm
Last major update 29-10-2021 - 19:25
Published 26-03-2019 - 18:29
Last modified 29-10-2021 - 19:25
Back to Top