An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-libsoup | Apr 24, 2018 | Apr 24, 2018 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Apr 24, 2018 | |
| Centos_linux | — | centos-upgrade-libsoupcentos-upgrade-libsoup-debuginfocentos-upgrade-libsoup-devel | Aug 28, 2019 | Apr 24, 2018 |
| Debian | debian-upgrade-libsoup2-4 | Aug 11, 2017 | Aug 10, 2017 | |
| Freebsd | freebsd-upgrade-package-libsoup | Aug 17, 2017 | Aug 17, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-net-libs-libsoup | Oct 30, 2017 | Sep 26, 2017 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-communication-im-pidgin-2-10-11-0-175-3-29-0-1-0oracle-solaris-11-3-upgrade-editor-gobby-0-4-12-0-175-3-29-0-1-0oracle-solaris-11-3-upgrade-library-c-net6-1-3-14-0-175-3-29-0-1-0oracle-solaris-11-3-upgrade-library-c-obby-0-4-7-0-175-3-29-0-1-0oracle-solaris-11-3-upgrade-library-desktop-evolution-data-server-2-30-3-0-175-3-29-0-1-0oracle-solaris-11-3-upgrade-library-desktop-gtk-vnc-0-7-0-0-175-3-29-0-2-0oracle-solaris-11-3-upgrade-library-libsoup-2-57-1-0-175-3-29-0-1-0oracle-solaris-11-3-upgrade-library-python-python-gtk-vnc-27-0-3-10-0-175-3-29-0-1-0 | Feb 22, 2018 | Feb 22, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-libsouporacle-linux-upgrade-libsoup-devel | Aug 10, 2017 | Aug 10, 2017 |
| Redhat_linux | — | redhat-upgrade-libsoupredhat-upgrade-libsoup-debuginforedhat-upgrade-libsoup-devel | Aug 10, 2017 | Aug 10, 2017 |
| Suse | — | suse-upgrade-libsoup-2_4-1suse-upgrade-libsoup-2_4-1-32bitsuse-upgrade-libsoup-develsuse-upgrade-libsoup-langsuse-upgrade-typelib-1_0-soup-2_4 | Aug 10, 2017 | Aug 10, 2017 |
| Ubuntu | ubuntu-upgrade-gir1-2-soup-2-4ubuntu-upgrade-libsoup-gnome2-4-1ubuntu-upgrade-libsoup2-4-1 | Aug 10, 2017 | Aug 10, 2017 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Apr 24, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub