QwikSec

Security Database

CVE

CWE

Training

CVE-2017-2885

Published: Apr 24, 2018

Modified: Sep 17, 2024

PUBLISHED

CVSS v3.0

9.8

CRITICAL

Description

An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability.

Vendor	Product	Versions
GNOME	libsoup	affected `2.58`

CVSS v3.0 Details

CVSS v3.0 Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

References

vendor-advisory

x_refsource_REDHAT

vendor-advisory

x_refsource_DEBIAN

vdb-entry

x_refsource_BID

20201204 ProCaster LE-32F430 SmartTV RCE via libsoup/2.51.3 stack overflow (CVE-2017-2885)

mailing-list

x_refsource_FULLDISC

https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0392

x_refsource_MISC

http://packetstormsecurity.com/files/160388/ProCaster-LE-32F430-GStreamer-souphttpsrc-libsoup-2.51.3-Stack-Overflow.html

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.