CVE-2017-2885 Memory corruption in libsoup
A stack-based buffer overflow in GNOME libsoup allows remote attackers to execute arbitrary code via a specially crafted HTTP request.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-2885?
CVE-2017-2885 is a critical memory corruption vulnerability in Debian Debian Linux, published on 24 Apr 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability.
Weakness: CWE-787
Which versions are affected by CVE-2017-2885?
It affects 8 products.
Linux distribution packages (26)
libsoup Red Hat:enterprise_linux:7::client | All versions | 0:2.56.0-4.el7_4 |
libsoup-debuginfo Red Hat:enterprise_linux:7::client | All versions | 0:2.56.0-4.el7_4 |
libsoup-devel Red Hat:enterprise_linux:7::client | All versions | 0:2.56.0-4.el7_4 |
libsoup Red Hat:enterprise_linux:7::computenode | All versions | 0:2.56.0-4.el7_4 |
libsoup-debuginfo Red Hat:enterprise_linux:7::computenode | All versions | 0:2.56.0-4.el7_4 |
libsoup-devel Red Hat:enterprise_linux:7::computenode | All versions | 0:2.56.0-4.el7_4 |
libsoup Red Hat:enterprise_linux:7::server | All versions | 0:2.56.0-4.el7_4 |
libsoup-debuginfo Red Hat:enterprise_linux:7::server | All versions | 0:2.56.0-4.el7_4 |
libsoup-devel Red Hat:enterprise_linux:7::server | All versions | 0:2.56.0-4.el7_4 |
libsoup Red Hat:enterprise_linux:7::workstation | All versions | 0:2.56.0-4.el7_4 |
libsoup-debuginfo Red Hat:enterprise_linux:7::workstation | All versions | 0:2.56.0-4.el7_4 |
libsoup-devel Red Hat:enterprise_linux:7::workstation | All versions | 0:2.56.0-4.el7_4 |
libsoup SUSE:Linux Enterprise Desktop 12 SP2 | All versions | 2.54.1-5.3.1 |
libsoup SUSE:Linux Enterprise Desktop 12 SP3 | All versions | 2.54.1-5.3.1 |
libsoup SUSE:Linux Enterprise Server 12 SP1-LTSS | All versions | 2.44.2-2.3.1 |
libsoup SUSE:Linux Enterprise Server 12 SP2 | All versions | 2.54.1-5.3.1 |
libsoup SUSE:Linux Enterprise Server 12 SP3 | All versions | 2.54.1-5.3.1 |
libsoup SUSE:Linux Enterprise Server 12-LTSS | All versions | 2.44.2-2.3.1 |
libsoup SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 | All versions | 2.54.1-5.3.1 |
libsoup SUSE:Linux Enterprise Server for SAP Applications 12 | All versions | 2.44.2-2.3.1 |
libsoup SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | All versions | 2.44.2-2.3.1 |
libsoup SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | All versions | 2.54.1-5.3.1 |
libsoup SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | All versions | 2.54.1-5.3.1 |
libsoup SUSE:Linux Enterprise Software Development Kit 12 SP2 | All versions | 2.54.1-5.3.1 |
libsoup SUSE:Linux Enterprise Software Development Kit 12 SP3 | All versions | 2.54.1-5.3.1 |
libsoup SUSE:OpenStack Cloud 6 | All versions | 2.44.2-2.3.1 |
Products include Debian Debian Linux, Gnome Libsoup, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Server Aus, Redhat Enterprise Linux Server Eus and 2 more.
How do I fix CVE-2017-2885?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2017-2885 being exploited?
There is no known exploitation of CVE-2017-2885 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as ALPINE-CVE-2017-2885, DEBIAN-CVE-2017-2885, DSA-3929-1, GHSA-qq4w-8g63-5r25, MGASA-2017-0272, RHSA-2017:2459 and 4 more.