Summary
[2.56.0-4]
- Fix chunked decoding buffer overrun (CVE-2017-2885) (rh #1479322)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | libsoup | 0:2.56.0-4.el7_4 |
| Oracle Linux · 7 | libsoup-devel | 0:2.56.0-4.el7_4 |
Vulnerabilities 1
-
Critical 9.8CVE-2017-2885 EPSS 23%
An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP req…