9.8
Critical
CVE-2017-2885 An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58
Description
An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| libsoup | 2.58 | No fix stated |
References
- RHSA-2017:2459 access.redhat.com
- DSA-3929 www.debian.org
- 100258 www.securityfocus.com
- 20201204 ProCaster LE-32F430 SmartTV RCE via libsoup/2.51.3 stack overflow (CVE-2017-2885) seclists.org
- www.talosintelligence.com www.talosintelligence.com
- packetstormsecurity.com packetstormsecurity.com
Timeline
- Published
- Last modified
Other CVEs of libsoup
The 5 CVEs of libsoup →
CVE-2025-12105
Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion
7.5
High
CVE-2024-52530
GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of…
7.5
High
CVE-2024-52531
GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in…
6.5
Medium
CVE-2024-52532
GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption
7.5
High