9.8
Critique
CVE-2017-2885 An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58
Description
An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| libsoup | 2.58 | Pas de correctif indiqué |
Références
- RHSA-2017:2459 access.redhat.com
- DSA-3929 www.debian.org
- 100258 www.securityfocus.com
- 20201204 ProCaster LE-32F430 SmartTV RCE via libsoup/2.51.3 stack overflow (CVE-2017-2885) seclists.org
- www.talosintelligence.com www.talosintelligence.com
- packetstormsecurity.com packetstormsecurity.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de libsoup
Les 5 CVE de libsoup →
CVE-2025-12105
Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion
7.5
Élevée
CVE-2024-52530
GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of…
7.5
Élevée
CVE-2024-52531
GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in…
6.5
Moyenne
CVE-2024-52532
GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption
7.5
Élevée