Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP requests. A remote, unauthenticated attacker can exploit this vulnerability by sending malicious HTTP request to cause denial of service to openwsman server.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libwsman1Upgrade openwsman-clientUpgrade openwsman-python3Upgrade openwsman-serverUpgrade libwsman-devel | May 4, 2022 | Mar 14, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libwsman1Upgrade libwsman-develUpgrade openwsman-pythonUpgrade openwsman-clientUpgrade openwsman-serverUpgrade openwsman-perlUpgrade openwsman-debuginfoUpgrade openwsman-ruby | Oct 28, 2020 | Mar 14, 2019 |
| Centos_linux | — | Upgrade rubygem-openwsman-debuginfoUpgrade openwsman-perl-debuginfoUpgrade openwsman-rubyUpgrade openwsman-clientUpgrade openwsman-server-debuginfoUpgrade openwsman-serverUpgrade openwsman-python3Upgrade openwsman-python3-debuginfoUpgrade openwsman-debugsourceUpgrade openwsman-client-debuginfoUpgrade openwsman-debuginfoUpgrade libwsman-develUpgrade libwsman1Upgrade openwsman-pythonUpgrade libwsman1-debuginfoUpgrade openwsman-perl | Oct 1, 2020 | Mar 14, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openwsman-pythonUpgrade libwsman1Upgrade openwsman-clientUpgrade openwsman-server | Nov 19, 2019 | Mar 14, 2019 |
| Oracle_linux | — | Upgrade openwsman-pythonUpgrade openwsman-python3Upgrade openwsman-perlUpgrade libwsman1Upgrade libwsman-develUpgrade openwsman-serverUpgrade openwsman-clientUpgrade openwsman-ruby | Oct 7, 2020 | Mar 12, 2019 |
| Redhat_linux | — | Upgrade openwsman-perl-debuginfoUpgrade openwsman-python3Upgrade openwsman-debugsourceUpgrade openwsman-server-debuginfoUpgrade rubygem-openwsman-debuginfoUpgrade openwsman-client-debuginfoUpgrade libwsman1Upgrade openwsman-perlUpgrade libwsman1-debuginfoUpgrade openwsman-clientUpgrade openwsman-rubyUpgrade openwsman-serverNo solution existsUpgrade openwsman-pythonUpgrade libwsman-develUpgrade openwsman-debuginfoUpgrade openwsman-python3-debuginfo | Oct 1, 2020 | Mar 14, 2019 |
| Rocky_linux | — | Upgrade openwsman-clientUpgrade openwsman-server-debuginfoUpgrade openwsman-serverUpgrade libwsman1-debuginfoUpgrade openwsman-python3-debuginfoUpgrade libwsman-develUpgrade openwsman-debuginfoUpgrade openwsman-python3Upgrade libwsman1Upgrade openwsman-client-debuginfoUpgrade openwsman-debugsource | Mar 12, 2024 | Mar 14, 2019 |
| Suse | — | Upgrade winrsUpgrade libwsman1Upgrade python3-openwsmanUpgrade libwsman_clientpp1Upgrade openwsman-perlUpgrade libwsman-develUpgrade openwsman-ruby-docsUpgrade libwsman_clientpp-develUpgrade openwsman-pythonUpgrade openwsman-server-plugin-rubyUpgrade openwsman-clientUpgrade openwsman-javaUpgrade openwsman-serverUpgrade libwsman3Upgrade openwsman-ruby | Mar 19, 2019 | Mar 14, 2019 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub