CVE-2017-2885
Fixed in a distro release EPSS 23%CVSS 9.8
An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability.
Products: gnome libsoup
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.3 | libsoup | 2.52.2-r1 |
| Alpine 3.4 | libsoup | 2.54.1-r1 |
| Alpine 3.5 | libsoup | 2.56.1-r0 |
| Alpine 3.6 | libsoup | 2.58.2-r0 |
| Alpine 3.7 | libsoup | 2.58.2-r0 |
| Alpine 3.8 | libsoup | 2.58.2-r0 |
| Debian 12 | libsoup2.4 | 2.56.1-1 |
| Debian 13 | libsoup2.4 | 2.56.1-1 |
| Debian 8 | libsoup2.4 | 2.48.0-1+deb8u1 |
| Debian 9 | libsoup2.4 | 2.56.0-2+deb9u1 |
| Red Hat Enterprise Linux 7 | libsoup | 0:2.56.0-4.el7_4 |
| Red Hat Enterprise Linux 7 | libsoup-debuginfo | 0:2.56.0-4.el7_4 |
| Red Hat Enterprise Linux 7 | libsoup-devel | 0:2.56.0-4.el7_4 |
| SUSE Enterprise Storage 4 | libsoup | 2.62.2-5.7.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | libsoup | 2.54.1-5.3.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | libsoup | 2.54.1-5.3.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | libsoup | 2.62.2-5.7.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | libsoup | 2.44.2-2.3.1 |
| SUSE Linux Enterprise Server 12 SP2 | libsoup | 2.54.1-5.3.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | libsoup | 2.62.2-5.7.1 |
| SUSE Linux Enterprise Server 12 SP3 | libsoup | 2.54.1-5.3.1 |
| SUSE Linux Enterprise Server 12 SP3 | libsoup | 2.62.2-5.7.1 |
| SUSE Linux Enterprise Server 12-LTSS | libsoup | 2.44.2-2.3.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | libsoup | 2.54.1-5.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | libsoup | 2.44.2-2.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libsoup | 2.44.2-2.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | libsoup | 2.62.2-5.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | libsoup | 2.54.1-5.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | libsoup | 2.54.1-5.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | libsoup | 2.62.2-5.7.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | libsoup | 2.54.1-5.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | libsoup | 2.62.2-5.7.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | libsoup | 2.54.1-5.3.1 |
| SUSE OpenStack Cloud 6 | libsoup | 2.44.2-2.3.1 |
| SUSE OpenStack Cloud 7 | libsoup | 2.62.2-5.7.1 |
| Ubuntu 14.04 LTS | libsoup2.4 | 2.44.2-1ubuntu2.2 |
| Ubuntu 16.04 LTS | libsoup2.4 | 2.52.2-1ubuntu0.2 |
| openSUSE Tumbleweed | libsoup | 2.72.0-2.5 |