{"id":"CVE-2017-9765","aliases":["DEBIAN-CVE-2017-9765","DLA-1036-1","EUVD-2017-18695","GHSA-h3gg-c3fx-2m67","MGASA-2017-0221","UBUNTU-CVE-2017-9765","openSUSE-SU-2024:10825-1"],"status":"published","title":"Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used...","description":"Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via a large XML document, aka Devil's Ivy. NOTE: the large document would be blocked by many common web-server configurations on general-purpose computers.","severity":{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.42081,"percentile":0.98701,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2017-07-20T00:00:00Z","modified":"2026-09-01T20:03:05Z","fixes":[{"ecosystem":"Debian:12","package":"gsoap","fixed_in":["2.8.48-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gsoap","fixed_in":["2.8.48-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gsoap","fixed_in":["2.8.48-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"r-other-x4r","fixed_in":["1.0.1+git20150806.c6bd9bd-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"r-other-x4r","fixed_in":["1.0.1+git20150806.c6bd9bd-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"r-other-x4r","fixed_in":["1.0.1+git20150806.c6bd9bd-2"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"gsoap","fixed_in":["2.8.7-2+deb7u1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"gsoap","fixed_in":["2.8.49-1.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"gsoap","fixed_in":["2.8.49-1.mga6"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"gsoap","fixed_in":["2.8.117-1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"gsoap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.48-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gsoap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.48-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gsoap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.48-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"r-other-x4r","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1+git20150806.c6bd9bd-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"r-other-x4r","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1+git20150806.c6bd9bd-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"r-other-x4r","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1+git20150806.c6bd9bd-2"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"gsoap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.7-2+deb7u1"}]}],"versions":["2.8.7-2"]},{"source":"osv","ecosystem":"Mageia:5","package":"gsoap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.49-1.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"gsoap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.49-1.mga6"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"gsoap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.22-1","2.8.22-2","2.8.28-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gsoap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.117-1.2"}]}]}],"products":[{"vendor":"genivia","product":"gsoap"}],"references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1049348","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","VDB Entry","report"]},{"url":"http://blog.senr.io/blog/devils-ivy-flaw-in-widely-used-third-party-code-impacts-millions","tags":["x_refsource_MISC","x_transferred","Mitigation","Technical Description","Third Party Advisory","advisory","report"]},{"url":"http://blog.senr.io/devilsivy.html","tags":["x_refsource_MISC","x_transferred","Exploit","Technical Description","Third Party Advisory","evidence"]},{"url":"https://www.genivia.com/advisory.html#Security_advisory:_CVE-2017-9765_bug_in_certain_versions_of_gSOAP_2.7_up_to_2.8.47_%28June_21%2C_2017%29","tags":["x_refsource_MISC","x_transferred","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472807","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","VDB Entry","report"]},{"url":"http://www.securityfocus.com/bid/99868","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://www.genivia.com/changelog.html#Version_2.8.48_upd_%2806/21/2017%29","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9765"},{"url":"https://www.genivia.com/advisory.html#Security_advisory:_CVE-2017-9765_bug_in_certain_versions_of_gSOAP_2.7_up_to_2.8.47_%28June_21,_2017%29"},{"url":"https://github.com/advisories/GHSA-h3gg-c3fx-2m67"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-9765","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0221.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21298","tags":["report"]},{"url":"http://openwall.com/lists/oss-security/2017/07/19/7","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-9765","tags":["report"]},{"url":"https://www.genivia.com/changelog.html#Version_2.8.48_upd_(06/21/2017)","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9765","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9765","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-9765","description":"Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via a large XML document, aka Devil's Ivy. NOTE: the large document would be blocked by many common web-server configurations on general-purpose computers.","status":"published","published":"2017-07-20T00:00:00Z","modified":"2024-08-05T17:18:01.972Z","updated_at":"2026-11-02T14:33:13.606903Z"}],"euvd":[{"id":"EUVD-2017-18695","description":"Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via a large XML document, aka Devil's Ivy. NOTE: the large document would be blocked by many common web-server configurations on general-purpose computers.","status":"published","published":"2017-07-20T00:00:00Z","modified":"2024-08-05T17:18:01Z","updated_at":"2026-11-03T02:23:27.257081Z"}],"ghsa":[{"id":"GHSA-h3gg-c3fx-2m67","title":"Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used...","description":"Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via a large XML document, aka Devil's Ivy. NOTE: the large document would be blocked by many common web-server configurations on general-purpose computers.","status":"published","published":"2022-05-17T01:06:04Z","modified":"2025-04-20T03:42:07Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:01:49.538564Z"}],"nvd":[{"id":"CVE-2017-9765","description":"Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via a large XML document, aka Devil's Ivy. NOTE: the large document would be blocked by many common web-server configurations on general-purpose computers.","status":"published","published":"2017-07-20T00:29:00.463Z","modified":"2026-06-17T01:28:51.66Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:03:54.012105Z"}],"osv":[{"id":"CVE-2017-9765","description":"Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via a large XML document, aka Devil's Ivy. NOTE: the large document would be blocked by many common web-server configurations on general-purpose computers.","status":"published","published":"2017-07-20T00:29:00.463Z","modified":"2026-04-16T06:20:32.329489718Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:07.192756Z"},{"id":"DEBIAN-CVE-2017-9765","description":"Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via a large XML document, aka Devil's Ivy. NOTE: the large document would be blocked by many common web-server configurations on general-purpose computers.","status":"published","published":"2017-07-20T00:29:00.463Z","modified":"2026-09-01T20:03:05.648022143Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.698576Z"},{"id":"UBUNTU-CVE-2017-9765","description":"Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via a large XML document, aka Devil's Ivy. NOTE: the large document would be blocked by many common web-server configurations on general-purpose computers.","status":"published","published":"2017-07-20T00:29:00Z","modified":"2026-04-22T11:37:37.455134Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:16.154988Z"},{"id":"DLA-1036-1","title":"gsoap - security update","status":"published","published":"2017-07-24T00:00:00Z","modified":"2026-03-09T01:00:45.65478Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"MGASA-2017-0221","title":"Updated gsoap packages fix security vulnerability","description":"A potential vulnerability to a large and specific XML message over 2GB\nin size (greater than 2147483711 bytes to trigger the software bug). A\nbuffer overflow can cause an open unsecured server to crash or\nmalfunction after 2GB is received (CVE-2017-9765).\n","status":"published","published":"2017-07-25T22:07:12Z","modified":"2026-04-16T06:23:40.808251676Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2024:10825-1","title":"gsoap-devel-2.8.117-1.2 on GA media","description":"These are all security issues fixed in the gsoap-devel-2.8.117-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:14:36.787032Z","updated_at":"2026-11-02T16:58:34.487567Z"}]}}