CVE-2019-3804

Name of the Vulnerable Software and Affected Versions Cockpit versions prior to 184

Description The issue is caused by a buffer overflow in memory due to incorrect use of glib's base64 decode functionality. This can be exploited by a remote attacker using a specially crafted request with an invalid base64-encoded cookie, potentially leading to a denial of service.

Recommendations For versions prior to 184, update to version 184 or later to resolve the issue. As a temporary workaround, consider restricting access to the web service to minimize the risk of exploitation.