An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libsoup | Apr 24, 2018 | Apr 24, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 24, 2018 |
| Centos_linux | — | Upgrade libsoupUpgrade libsoup-develUpgrade libsoup-debuginfo | Aug 28, 2019 | Apr 24, 2018 |
| Debian | — | Upgrade libsoup2.4 | Aug 11, 2017 | Aug 10, 2017 |
| Freebsd | — | Upgrade libsoup | Aug 17, 2017 | Aug 17, 2017 |
| Gentoo Linux | — | Upgrade net-libs/libsoup. | Oct 30, 2017 | Sep 26, 2017 |
| Oracle Solaris | — | Upgrade library/libsoup to version 2.57.1-0.175.3.29.0.1.0 on Solaris 11.3Upgrade library/c++/obby to version 0.4.7-0.175.3.29.0.1.0 on Solaris 11.3Upgrade library/desktop/evolution-data-server to version 2.30.3-0.175.3.29.0.1.0 on Solaris 11.3Upgrade library/python/python-gtk-vnc-27 to version 0.3.10-0.175.3.29.0.1.0 on Solaris 11.3Upgrade library/desktop/gtk-vnc to version 0.7.0-0.175.3.29.0.2.0 on Solaris 11.3Upgrade editor/gobby to version 0.4.12-0.175.3.29.0.1.0 on Solaris 11.3Upgrade communication/im/pidgin to version 2.10.11-0.175.3.29.0.1.0 on Solaris 11.3Upgrade library/c++/net6 to version 1.3.14-0.175.3.29.0.1.0 on Solaris 11.3 | Feb 22, 2018 | Feb 22, 2018 |
| Oracle_linux | — | Upgrade libsoup-develUpgrade libsoup | Aug 10, 2017 | Aug 10, 2017 |
| Redhat_linux | — | Upgrade libsoup-debuginfoUpgrade libsoupUpgrade libsoup-devel | Aug 10, 2017 | Aug 10, 2017 |
| Suse | — | Upgrade libsoup-develUpgrade typelib-1_0-Soup-2_4Upgrade libsoup-2_4-1-32bitUpgrade libsoup-langUpgrade libsoup-2_4-1 | Aug 10, 2017 | Aug 10, 2017 |
| Ubuntu | — | Upgrade gir1.2-soup-2.4Upgrade libsoup-gnome2.4-1Upgrade libsoup2.4-1 | Aug 10, 2017 | Aug 10, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 24, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub