CVE-2017-2885: Buffer Overflow
A stack based buffer overflow vulnerability has been reported in GNOME libsoup 2.58. The flaw is caused due to a boundary error within the "soupfilterinputstreamreaduntil()" function when parsing chunk encoded HTTP traffic and affects both the server and client functionality of libsoup.
A remote attacker could exploit this flaw to cause a crash or, potentially, execute arbitrary code by sending a specially crafted HTTP request to a server using the libsoup HTTP server functionality or by tricking a user into connecting to a malicious HTTP server with an application using the libsoup HTTP client functionality.
Please note that the libsoup packages as shipped with Red Hat Enterprise Linux 7 contain a "stack smashing protection" mitigation for the relevant function, which makes exploitation significantly harder. Thus, in most cases an exploitation attempt should be mitigated to a mere crash. However, successful exploitation to execute arbitrary code can't be ruled out entirely.
Other sources
An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2885?
CVE-2017-2885 is classified as a high-severity vulnerability due to its potential to cause a stack-based buffer overflow.
How do I fix CVE-2017-2885?
To fix CVE-2017-2885, upgrade your libsoup package to version 2.64.2-2 or later if using Debian, or 2.59.90.1 or later if using Red Hat.
Which versions are affected by CVE-2017-2885?
Affected versions of libsoup include versions up to 2.58 for Debian and versions prior to 2.59.90.1 for Red Hat.
Is CVE-2017-2885 still exploitable in the latest versions?
No, CVE-2017-2885 is not exploitable in the latest versions of libsoup, as they have patched the buffer overflow vulnerability.
Do both server and client components of libsoup need updates for CVE-2017-2885?
Yes, both server and client components of libsoup are affected and require updates to mitigate the CVE-2017-2885 vulnerability.