USN-3383-1 — libsoup2.4 vulnerability

Summary

Aleksandar Nikolic discovered a stack based buffer overflow when
handling chunked encoding. An attacker could use this to cause a
denial of service or possibly execute arbitrary code.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 14.04 LTS 14.04:LTS	libsoup2.4	2.44.2-1ubuntu2.2
Ubuntu · 16.04 LTS 16.04:LTS	libsoup2.4	2.52.2-1ubuntu0.2

Vulnerabilities 1

Critical 9.8

CVE-2017-2885 EPSS 23%

An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP req…

GNOME libsoup libsoup2.4 libsoup2.4 Debian Ubuntu Alpine

Apr 24, 2018

References

report
https://ubuntu.com/security/CVE-2017-2885

libsoup2.4 vulnerability

Summary

Fixed packages 2

Vulnerabilities 1

An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP req…

References