Lucene search
Veracode Vulnerability DatabaseVERACODE:25273HistoryMay 10, 2020 - 11:23 p.m.
Remote Code Execution
2020-05-1023:23:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.004 Low
EPSS
Percentile
74.0%
libsoup is vulnerable to remote code execution. The vulnerability exists as an exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libsoup:3.3 | eq | 2.52.2-r0 | |
| libsoup:3.3 | eq | 2.52.2-r0 |
References
packetstormsecurity.com/files/160388/ProCaster-LE-32F430-GStreamer-souphttpsrc-libsoup-2.51.3-Stack-Overflow.html
seclists.org/fulldisclosure/2020/Dec/3
www.securityfocus.com/bid/100258
access.redhat.com/errata/RHSA-2017:2459
www.debian.org/security/2017/dsa-3929
www.talosintelligence.com/vulnerability_reports/TALOS-2017-0392
Related
talos
talos
GNOME libsoup HTTP Chunked Encoding Remote Code Execution Vulnerability
2017-08-10 00:00:00
nessus
nessus
Ubuntu 14.04 LTS / 16.04 LTS : libsoup vulnerability (USN-3383-1)
2017-08-11 00:00:00
Fedora 25 : mingw-libsoup (2017-c9d8011d69)
2017-08-24 00:00:00
GLSA-201709-26 : libsoup: Arbitrary remote code execution
2017-09-27 00:00:00
openvas
openvas
openSUSE: Security Advisory for libsoup (openSUSE-SU-2017:2153-1)
2017-08-12 00:00:00
RedHat Update for libsoup RHSA-2017:2459-01
2017-08-11 00:00:00
Fedora Update for mingw-libsoup FEDORA-2017-1f4c82d73e
2017-08-25 00:00:00
cve
cve
CVE-2017-2885
2018-04-24 19:29:02
osv
osv
libsoup2.4 - security update
2017-08-10 00:00:00
CVE-2017-2885
2018-04-24 19:29:02
fedora
fedora
[SECURITY] Fedora 25 Update: libsoup-2.56.1-1.fc25
2017-08-14 00:56:21
[SECURITY] Fedora 26 Update: mingw-libsoup-2.58.2-1.fc26
2017-08-22 04:43:23
[SECURITY] Fedora 25 Update: mingw-libsoup-2.56.1-1.fc25
2017-08-22 12:50:26
packetstorm
packetstorm
ProCaster LE-32F430 GStreamer souphttpsrc libsoup/2.51.3 Stack Overflow
2020-12-07 00:00:00
ibm
ibm
Security Bulletin: A vulnerability in libsoup affects PowerKVM
2018-06-18 01:38:15
gentoo
gentoo
libsoup: Arbitrary remote code execution
2017-09-26 00:00:00
debiancve
debiancve
CVE-2017-2885
2018-04-24 19:29:02
cvelist
cvelist
CVE-2017-2885
2017-08-10 00:00:00
centos
centos
libsoup security update
2017-08-24 09:44:05
suse
suse
Security update for libsoup (important)
2017-08-10 18:08:55
Security update for libsoup (important)
2017-08-10 18:09:29
Security update for libsoup (important)
2017-08-12 00:09:33
redhatcve
redhatcve
CVE-2017-2885
2017-08-10 13:18:23
redhat
redhat
(RHSA-2017:2459) Important: libsoup security update
2017-08-10 13:21:25
mageia
mageia
Updated libsoup packages fix security vulnerability
2017-08-16 03:01:16
freebsd
freebsd
libsoup -- stack based buffer overflow
2017-08-17 00:00:00
archlinux
archlinux
[ASA-201708-5] libsoup: arbitrary code execution
2017-08-10 00:00:00
oraclelinux
oraclelinux
libsoup security update
2017-08-10 00:00:00
debian
debian
[SECURITY] [DSA 3929-1] libsoup2.4 security update
2017-08-10 13:26:26
[SECURITY] [DSA 3929-1] libsoup2.4 security update
2017-08-10 13:26:26
slackware
slackware
[slackware-security] libsoup
2017-08-11 23:11:09
alpinelinux
alpinelinux
CVE-2017-2885
2018-04-24 19:29:02
ubuntucve
ubuntucve
CVE-2017-2885
2017-08-10 00:00:00
nvd
nvd
CVE-2017-2885
2018-04-24 19:29:02
zdt
zdt
prion
prion
Stack overflow
2018-04-24 19:29:00
ubuntu
ubuntu
libsoup vulnerability
2017-08-10 00:00:00
seebug
seebug
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2018-1.0-0149
2018-06-20 00:00:00
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2018-2.0-0060
2018-06-20 00:00:00
Critical Photon OS Security Update - PHSA-2018-0149
2018-06-20 00:00:00