Integer overflow in the soup_base64_encode function in soup-misc.c in libsoup 2.x.x before 2.2.x, and 2.x before 2.24, allows context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libsoupUpgrade evolution28-libsoupUpgrade evolution28-libsoup-develUpgrade libsoup-devel | Dec 1, 2016 | Mar 14, 2009 |
| Oracle_linux | — | Upgrade libsoupUpgrade libsoup-devel | Oct 16, 2024 | Mar 14, 2009 |
| Suse | — | Upgrade libsoup-develUpgrade libsoup | Feb 17, 2015 | Mar 14, 2009 |
| Ubuntu | — | Upgrade libsoup2.2-8 | Nov 8, 2024 | Mar 14, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub