Integer overflow in the soup_base64_encode function in soup-misc.c in libsoup 2.x.x before 2.2.x, and 2.x before 2.24, allows context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade evolution28-libsoup-develUpgrade libsoup-develUpgrade evolution28-libsoupUpgrade libsoup | Dec 1, 2016 | Mar 14, 2009 |
| Oracle_linux | — | Upgrade libsoupUpgrade libsoup-devel | Oct 16, 2024 | Mar 14, 2009 |
| Suse | — | Upgrade libsoupUpgrade libsoup-devel | Feb 17, 2015 | Mar 14, 2009 |
| Ubuntu | — | Upgrade libsoup2.2-8 | Nov 8, 2024 | Mar 14, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub