Back
CVE-2017-2885
CRITICAL
An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability.
Published: Apr 24, 2018
Modified: Jun 17, 2026
CWE-787
CVSS Metrics
CVSSv3
Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products (10)
| Vendor | Product | Version |
|---|---|---|
| gnome | libsoup | 2.58 |
| debian | debian_linux | 8.0 |
| debian | debian_linux | 9.0 |
| redhat | enterprise_linux_desktop | 7.0 |
| redhat | enterprise_linux_server | 7.0 |
| redhat | enterprise_linux_server_aus | 7.4 |
| redhat | enterprise_linux_server_eus | 7.4 |
| redhat | enterprise_linux_server_eus | 7.5 |
| redhat | enterprise_linux_server_tus | 7.4 |
| redhat | enterprise_linux_workstation | 7.0 |
GitHub Security Advisory GHSA-qq4w-8g63-5r25
An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A...
References (12)
- http://packetstormsecurity.com/files/160388/ProCaster-LE-32F430-GStreamer-souphttpsrc-libsoup-2.51.3-Stack-Overflow.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2020/Dec/3 Exploit, Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/100258 Broken Link
- https://access.redhat.com/errata/RHSA-2017:2459 Third Party Advisory
- https://www.debian.org/security/2017/dsa-3929 Third Party Advisory
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0392 Exploit, Technical Description, Third Party Advisory
- http://packetstormsecurity.com/files/160388/ProCaster-LE-32F430-GStreamer-souphttpsrc-libsoup-2.51.3-Stack-Overflow.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2020/Dec/3 Exploit, Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/100258 Broken Link
- https://access.redhat.com/errata/RHSA-2017:2459 Third Party Advisory
- https://www.debian.org/security/2017/dsa-3929 Third Party Advisory
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0392 Exploit, Technical Description, Third Party Advisory
Risk Scores
CVSS Score
9.8 / 10
EPSS Score
24.34%
Top 2% most likely to be exploited
Threat Score
46.5 / 100
Data Sources
NVD
EPSS
GitHub