What’s Vulnerable › Vulnerabilities

CVE-2017-2885

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 23.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-04-24 · updated 2026-06-17
• Weakness: CWE-787

Description

An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability.

Affected products

• Debian Linux: 8.0, 9.0
• GNOME libsoup: 2.58
• RedHat Enterprise Linux Desktop: 7.0
• RedHat Enterprise Linux Server: 7.0
• RedHat Enterprise Linux Server Aus: 7.4
• RedHat Enterprise Linux Server Eus: 7.4, 7.5
• RedHat Enterprise Linux Server Tus: 7.4
• RedHat Enterprise Linux Workstation: 7.0

References

• http://packetstormsecurity.com/files/160388/ProCaster-LE-32F430-GStreamer-souphttpsrc-libsoup-2.51.3-Stack-Overflow.html
• http://seclists.org/fulldisclosure/2020/Dec/3
• http://www.securityfocus.com/bid/100258
• https://access.redhat.com/errata/RHSA-2017:2459
• https://www.debian.org/security/2017/dsa-3929
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0392
• http://packetstormsecurity.com/files/160388/ProCaster-LE-32F430-GStreamer-souphttpsrc-libsoup-2.51.3-Stack-Overflow.html
• http://seclists.org/fulldisclosure/2020/Dec/3
• http://www.securityfocus.com/bid/100258
• https://access.redhat.com/errata/RHSA-2017:2459
• https://www.debian.org/security/2017/dsa-3929
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0392

Get alerted when CVE-2017-2885 or the next vulnerability affects your stack