CVE-2017-2885

9.8CRITICAL

Key Information:

Vendor
Gnome
Status
Libsoup
Vendor
CVE Published:
24 April 2018

Summary

An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability.

Affected Version(s)

libsoup 2.58

References

https://access.redhat.com/errata/RHSA-2017:2459
vendor-advisoryx_refsource_REDHAT
https://www.debian.org/security/2017/dsa-3929
vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/100258
vdb-entryx_refsource_BID

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.