CVE-2017-2885

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-2885
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-2885.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-2885
Related
Published
2018-04-24T19:29:02Z
Modified
2024-09-18T02:13:33.101862Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability.

References

Affected packages

Alpine:v3.3 / libsoup

Package

Name
libsoup
Purl
pkg:apk/alpine/libsoup?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.52.2-r1

Affected versions

2.*

2.26.0-r0
2.26.1-r0
2.26.2-r0
2.26.3-r0
2.27.4-r0
2.28.0-r0
2.28.1-r0
2.28.2-r0
2.28.2-r1
2.30.0-r0
2.30.0-r1
2.30.1-r0
2.30.2-r0
2.31.92-r0
2.32.0-r0
2.32.1-r0
2.32.2-r0
2.32.2-r1
2.34.0-r0
2.34.1-r0
2.34.1-r1
2.34.2-r0
2.34.2-r1
2.34.3-r0
2.36.0-r0
2.36.1-r0
2.36.1-r1
2.36.1-r2
2.38.1-r0
2.40.0-r0
2.40.2-r0
2.40.3-r0
2.42.0-r0
2.42.1-r0
2.42.2-r0
2.43.5-r0
2.44.0-r0
2.44.1-r0
2.44.2-r0
2.44.2-r1
2.46.0-r0
2.48.0-r0
2.48.1-r0
2.50.0-r0
2.50.0-r1
2.51.3-r0
2.52.2-r0

Alpine:v3.4 / libsoup

Package

Name
libsoup
Purl
pkg:apk/alpine/libsoup?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.54.1-r1

Affected versions

2.*

2.26.0-r0
2.26.1-r0
2.26.2-r0
2.26.3-r0
2.27.4-r0
2.28.0-r0
2.28.1-r0
2.28.2-r0
2.28.2-r1
2.30.0-r0
2.30.0-r1
2.30.1-r0
2.30.2-r0
2.31.92-r0
2.32.0-r0
2.32.1-r0
2.32.2-r0
2.32.2-r1
2.34.0-r0
2.34.1-r0
2.34.1-r1
2.34.2-r0
2.34.2-r1
2.34.3-r0
2.36.0-r0
2.36.1-r0
2.36.1-r1
2.36.1-r2
2.38.1-r0
2.40.0-r0
2.40.2-r0
2.40.3-r0
2.42.0-r0
2.42.1-r0
2.42.2-r0
2.43.5-r0
2.44.0-r0
2.44.1-r0
2.44.2-r0
2.44.2-r1
2.46.0-r0
2.48.0-r0
2.48.1-r0
2.50.0-r0
2.50.0-r1
2.51.3-r0
2.52.2-r0
2.54.0-r0
2.54.1-r0

Alpine:v3.5 / libsoup

Package

Name
libsoup
Purl
pkg:apk/alpine/libsoup?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.56.1-r0

Affected versions

2.*

2.26.0-r0
2.26.1-r0
2.26.2-r0
2.26.3-r0
2.27.4-r0
2.28.0-r0
2.28.1-r0
2.28.2-r0
2.28.2-r1
2.30.0-r0
2.30.0-r1
2.30.1-r0
2.30.2-r0
2.31.92-r0
2.32.0-r0
2.32.1-r0
2.32.2-r0
2.32.2-r1
2.34.0-r0
2.34.1-r0
2.34.1-r1
2.34.2-r0
2.34.2-r1
2.34.3-r0
2.36.0-r0
2.36.1-r0
2.36.1-r1
2.36.1-r2
2.38.1-r0
2.40.0-r0
2.40.2-r0
2.40.3-r0
2.42.0-r0
2.42.1-r0
2.42.2-r0
2.43.5-r0
2.44.0-r0
2.44.1-r0
2.44.2-r0
2.44.2-r1
2.46.0-r0
2.48.0-r0
2.48.1-r0
2.50.0-r0
2.50.0-r1
2.51.3-r0
2.52.2-r0
2.54.0-r0
2.54.1-r0
2.54.1-r1
2.54.1-r2
2.56.0-r0
2.56.0-r1

Alpine:v3.6 / libsoup

Package

Name
libsoup
Purl
pkg:apk/alpine/libsoup?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.58.2-r0

Affected versions

2.*

2.26.0-r0
2.26.1-r0
2.26.2-r0
2.26.3-r0
2.27.4-r0
2.28.0-r0
2.28.1-r0
2.28.2-r0
2.28.2-r1
2.30.0-r0
2.30.0-r1
2.30.1-r0
2.30.2-r0
2.31.92-r0
2.32.0-r0
2.32.1-r0
2.32.2-r0
2.32.2-r1
2.34.0-r0
2.34.1-r0
2.34.1-r1
2.34.2-r0
2.34.2-r1
2.34.3-r0
2.36.0-r0
2.36.1-r0
2.36.1-r1
2.36.1-r2
2.38.1-r0
2.40.0-r0
2.40.2-r0
2.40.3-r0
2.42.0-r0
2.42.1-r0
2.42.2-r0
2.43.5-r0
2.44.0-r0
2.44.1-r0
2.44.2-r0
2.44.2-r1
2.46.0-r0
2.48.0-r0
2.48.1-r0
2.50.0-r0
2.50.0-r1
2.51.3-r0
2.52.2-r0
2.54.0-r0
2.54.1-r0
2.54.1-r1
2.54.1-r2
2.56.0-r0
2.56.0-r1
2.57.1-r0
2.58.0-r0
2.58.1-r0

Alpine:v3.7 / libsoup

Package

Name
libsoup
Purl
pkg:apk/alpine/libsoup?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.58.2-r0

Affected versions

2.*

2.26.0-r0
2.26.1-r0
2.26.2-r0
2.26.3-r0
2.27.4-r0
2.28.0-r0
2.28.1-r0
2.28.2-r0
2.28.2-r1
2.30.0-r0
2.30.0-r1
2.30.1-r0
2.30.2-r0
2.31.92-r0
2.32.0-r0
2.32.1-r0
2.32.2-r0
2.32.2-r1
2.34.0-r0
2.34.1-r0
2.34.1-r1
2.34.2-r0
2.34.2-r1
2.34.3-r0
2.36.0-r0
2.36.1-r0
2.36.1-r1
2.36.1-r2
2.38.1-r0
2.40.0-r0
2.40.2-r0
2.40.3-r0
2.42.0-r0
2.42.1-r0
2.42.2-r0
2.43.5-r0
2.44.0-r0
2.44.1-r0
2.44.2-r0
2.44.2-r1
2.46.0-r0
2.48.0-r0
2.48.1-r0
2.50.0-r0
2.50.0-r1
2.51.3-r0
2.52.2-r0
2.54.0-r0
2.54.1-r0
2.54.1-r1
2.54.1-r2
2.56.0-r0
2.56.0-r1
2.57.1-r0
2.58.0-r0
2.58.1-r0

Alpine:v3.8 / libsoup

Package

Name
libsoup
Purl
pkg:apk/alpine/libsoup?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.58.2-r0

Affected versions

2.*

2.26.0-r0
2.26.1-r0
2.26.2-r0
2.26.3-r0
2.27.4-r0
2.28.0-r0
2.28.1-r0
2.28.2-r0
2.28.2-r1
2.30.0-r0
2.30.0-r1
2.30.1-r0
2.30.2-r0
2.31.92-r0
2.32.0-r0
2.32.1-r0
2.32.2-r0
2.32.2-r1
2.34.0-r0
2.34.1-r0
2.34.1-r1
2.34.2-r0
2.34.2-r1
2.34.3-r0
2.36.0-r0
2.36.1-r0
2.36.1-r1
2.36.1-r2
2.38.1-r0
2.40.0-r0
2.40.2-r0
2.40.3-r0
2.42.0-r0
2.42.1-r0
2.42.2-r0
2.43.5-r0
2.44.0-r0
2.44.1-r0
2.44.2-r0
2.44.2-r1
2.46.0-r0
2.48.0-r0
2.48.1-r0
2.50.0-r0
2.50.0-r1
2.51.3-r0
2.52.2-r0
2.54.0-r0
2.54.1-r0
2.54.1-r1
2.54.1-r2
2.56.0-r0
2.56.0-r1
2.57.1-r0
2.58.0-r0
2.58.1-r0

Debian:11 / libsoup2.4

Package

Name
libsoup2.4
Purl
pkg:deb/debian/libsoup2.4?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.56.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / libsoup2.4

Package

Name
libsoup2.4
Purl
pkg:deb/debian/libsoup2.4?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.56.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / libsoup2.4

Package

Name
libsoup2.4
Purl
pkg:deb/debian/libsoup2.4?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.56.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/gnome/libsoup

Affected ranges

Type
GIT
Repo
https://github.com/gnome/libsoup
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c829641668d893d0136993dcc6d7e1d661dd6e39

Affected versions

2.*

2.40.0
2.40.1
2.41.1
2.41.2
2.41.3
2.41.4
2.41.5
2.41.90
2.41.91
2.41.92
2.42.0
2.42.1
2.43.1
2.43.2
2.43.4
2.43.5
2.43.90
2.43.92
2.44.0
2.44.1
2.45.3
2.45.90
2.45.92
2.46.0
2.47.3
2.47.4
2.47.92
2.48.0
2.49.1
2.49.91
2.49.91.1
2.49.92
2.50.0
2.51.3
2.51.90
2.51.92
2.52.0
2.52.1
2.53.1
2.53.2
2.53.90
2.53.92
2.54.0
2.54.0.1
2.54.1
2.55.90
2.56.0
2.57.1
2.58.0

Other

LIBSOUP_1_99_15
LIBSOUP_1_99_16
LIBSOUP_1_99_17
LIBSOUP_1_99_19
LIBSOUP_1_99_20
LIBSOUP_1_99_22
LIBSOUP_1_99_23
LIBSOUP_1_99_24
LIBSOUP_1_99_25
LIBSOUP_2_1_10
LIBSOUP_2_1_11
LIBSOUP_2_1_12
LIBSOUP_2_1_13
LIBSOUP_2_1_2
LIBSOUP_2_1_3
LIBSOUP_2_1_4
LIBSOUP_2_1_5
LIBSOUP_2_1_6
LIBSOUP_2_1_7
LIBSOUP_2_1_8
LIBSOUP_2_1_9
LIBSOUP_2_23_1
LIBSOUP_2_23_6
LIBSOUP_2_23_91
LIBSOUP_2_23_92
LIBSOUP_2_24_0
LIBSOUP_2_25_1
LIBSOUP_2_25_2
LIBSOUP_2_25_4
LIBSOUP_2_25_5
LIBSOUP_2_25_91
LIBSOUP_2_26_0
LIBSOUP_2_26_0_9
LIBSOUP_2_26_1
LIBSOUP_2_27_1
LIBSOUP_2_27_2
LIBSOUP_2_27_4
LIBSOUP_2_27_5
LIBSOUP_2_27_90
LIBSOUP_2_27_91
LIBSOUP_2_27_92
LIBSOUP_2_28_0
LIBSOUP_2_28_1
LIBSOUP_2_29_3
LIBSOUP_2_29_5
LIBSOUP_2_29_6
LIBSOUP_2_29_90
LIBSOUP_2_29_91
LIBSOUP_2_2_0
LIBSOUP_2_2_100
LIBSOUP_2_2_101
LIBSOUP_2_2_102
LIBSOUP_2_2_103
LIBSOUP_2_2_5
LIBSOUP_2_2_6
LIBSOUP_2_2_6_1
LIBSOUP_2_2_90_NOT_A_REAL_RELEASE
LIBSOUP_2_2_91
LIBSOUP_2_2_92
LIBSOUP_2_2_93
LIBSOUP_2_2_94
LIBSOUP_2_2_95_1
LIBSOUP_2_2_96
LIBSOUP_2_2_97
LIBSOUP_2_2_98
LIBSOUP_2_2_99
LIBSOUP_2_30_0
LIBSOUP_2_31_6
LIBSOUP_2_31_90
LIBSOUP_2_31_92
LIBSOUP_2_32_0
LIBSOUP_2_32_1
LIBSOUP_2_32_2
LIBSOUP_2_33_4
LIBSOUP_2_33_5
LIBSOUP_2_33_6
LIBSOUP_2_33_90
LIBSOUP_2_33_92
LIBSOUP_2_34_0
LIBSOUP_2_34_1
LIBSOUP_2_35_3
LIBSOUP_2_35_4
LIBSOUP_2_35_90
LIBSOUP_2_35_92
LIBSOUP_2_36_0
LIBSOUP_2_37_1
LIBSOUP_2_37_2
LIBSOUP_2_37_3
LIBSOUP_2_37_4
LIBSOUP_2_37_5
LIBSOUP_2_37_90
LIBSOUP_2_37_91
LIBSOUP_2_37_92
LIBSOUP_2_38_0
LIBSOUP_2_38_1
LIBSOUP_2_39_1
LIBSOUP_2_39_2
LIBSOUP_2_39_3
LIBSOUP_2_39_4
LIBSOUP_2_39_4_1
LIBSOUP_2_39_5
LIBSOUP_2_39_90
LIBSOUP_2_39_91
LIBSOUP_2_39_92
LIBSOUP_2_3_0_1
LIBSOUP_2_3_2
LIBSOUP_2_3_4
LIBSOUP_2_40_0
LIBSOUP_2_40_1
LIBSOUP_2_41_1
LIBSOUP_2_41_2
LIBSOUP_2_41_3
LIBSOUP_2_41_4
LIBSOUP_2_41_5
LIBSOUP_2_41_90
LIBSOUP_2_41_91
LIBSOUP_2_41_92
LIBSOUP_2_42_0
LIBSOUP_2_42_1
LIBSOUP_2_43_1
LIBSOUP_2_43_2
LIBSOUP_2_43_4
LIBSOUP_2_43_5
LIBSOUP_2_43_90
LIBSOUP_2_43_92
LIBSOUP_2_4_0
LIBSOUP_2_4_1
SOUP_0_4
SOUP_0_4_1
SOUP_0_5
SOUP_0_6_0
SOUP_2_2_100
gnome-2-12-base
libsoup-2-0-branch-base
libsoup-hacking-branch-base
libsoup-pre214-branch-base