9.8
Critical
CVE-2017-2885 An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58
Description
An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| libsoup | 2.58 | No fix stated |
Other CVEs of libsoup
The 5 CVEs of libsoup →
CVE-2025-12105
Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion
7.5
High
CVE-2024-52530
GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of…
7.5
High
CVE-2024-52531
GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in…
6.5
Medium
CVE-2024-52532
GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption
7.5
High