DEBIAN-CVE-2009-0585

Source
https://security-tracker.debian.org/tracker/CVE-2009-0585
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2009-0585.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2009-0585
Upstream
  • CVE-2009-0585
Downstream
Published
2009-03-14T18:30:00Z
Modified
2026-10-31T16:00:03Z
Summary
[none]
Details

Integer overflow in the soup_base64_encode function in soup-misc.c in libsoup 2.x.x before 2.2.x, and 2.x before 2.24, allows context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation.

References

Affected packages

Debian:14 / libsoup

Package

Name
libsoup
Purl
pkg:deb/debian/libsoup?arch=source&distro=forky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.2.105-4

Affected versions

2.*
2.1.2-1
2.1.5-1
2.1.7-1
2.2.2-1
2.2.3-1
2.2.3-2
2.2.3-2sarge1
2.2.6-1
2.2.7-1
2.2.7-2
2.2.91-1
2.2.91-2
2.2.92-1
2.2.93-1
2.2.93-2
2.2.93-3
2.2.95.1-1
2.2.96-1
2.2.97-1
2.2.98-1
2.2.98-2
2.2.98-2+etch1
2.2.99-1
2.2.100-1
2.2.101-1
2.2.102-1
2.2.103-1
2.2.104-1
2.2.105-1
2.2.105-2
2.2.105-3

Ecosystem specific

{
    "urgency": "medium"
}

Database specific

source
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2009-0585.json"