Lucene search

[email protected]CVE-2017-2885

HistoryApr 24, 2018 - 7:29 p.m.

CVE-2017-2885

2018-04-2419:29:02

CWE-787

[email protected]

web.nvd.nist.gov

209

cve-2017-2885

exploitable

buffer overflow

gnome

libsoup

remote code execution

http request

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.0%

JSON

An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability.

Affected configurations

Vulners

NVD

Node

gnomelibsoupRange≤2.58

VendorProductVersionCPE
gnomelibsoup*cpe:2.3:a:gnome:libsoup:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gnome	libsoup	*	cpe:2.3:a:gnome:libsoup::::::::

CNA Affected

[
  {
    "product": "libsoup",
    "vendor": "GNOME",
    "versions": [
      {
        "status": "affected",
        "version": "2.58"
      }
    ]
  }
]