CVE-2019-3804

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-909

Affected software

Vendor	Product	Versions
[UNKNOWN]	cockpit	184

References

https://access.redhat.com/errata/RHSA-2019:1569Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1571Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3804Issue Tracking, Patch, Third Party Advisory
https://github.com/cockpit-project/cockpit/commit/c51f6177576d7e12Patch, Third Party Advisory
https://github.com/cockpit-project/cockpit/pull/10819Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1569Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1571Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3804Issue Tracking, Patch, Third Party Advisory
https://github.com/cockpit-project/cockpit/commit/c51f6177576d7e12Patch, Third Party Advisory
https://github.com/cockpit-project/cockpit/pull/10819Third Party Advisory

Timeline

Published: Mar 26, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-38054.7A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate CVE-2019-38068.1An issue has been found in PowerDNS Recursor versions after 4.1.3 before 4.1.9 where Lua hooks are not properly applied to queries received CVE-2019-38079.8An issue has been found in PowerDNS Recursor versions 4.1.x before 4.1.9 where records in the answer section of responses received from auth CVE-2019-38085.4A flaw was found in Moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The 'manage gr CVE-2019-380910.0A flaw was found in Moodle versions 3.1 to 3.1.15 and earlier unsupported versions. The mybackpack functionality allowed setting the URL of CVE-2019-38106.1A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The /userpix/ CVE-2019-38115.2A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead o CVE-2019-38125.5QEMU, through version 2.10 and through version 3.1.0, is vulnerable to an out-of-bounds read of up to 128 bytes in the hw/i2c/i2c-ddc.c:i2c_CVE-2019-38137.5Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt. This may lead CVE-2019-38146.8It was discovered that Dovecot before versions 2.2.36.1 and 2.3.4.1 incorrectly handled client certificates. A remote attacker in possession CVE-2019-38153.3A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatch_message_real() in jo CVE-2019-38167.5Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemo