High severity7.5OSV Advisory· Published Mar 26, 2019· Updated Jun 17, 2026

CVE-2019-3804

Description

It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Agentejo/CockpitOSV2 versions
0.10, 0.100, 0.101, …+ 1 more
- (no CPE)range: 0.10, 0.100, 0.101, …
- cpe:2.3:a:cockpit-project:cockpit:*:*:*:*:*:*:*:*range: <184
Red Hat/Virtualization
cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*
Fedoraproject/Fedora
cpe:2.3:o:fedoraproject:fedora:-:*:*:*:*:*:*:*
Cockpit Hq/Cockpit Hq/cockpitllm-fuzzy
Range: <184

Patches

Vulnerability mechanics

References

bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
github.com/cockpit-project/cockpit/commit/c51f6177576d7e12nvdPatchThird Party Advisory
access.redhat.com/errata/RHSA-2019:1569nvdThird Party Advisory
access.redhat.com/errata/RHSA-2019:1571nvdThird Party Advisory
github.com/cockpit-project/cockpit/pull/10819nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000