CVE-2017-2885Libsoup Stack Buffer Overflow
An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58.
Published Apr 24, 2018 · Updated Aug 7, 2026 · Also known as ALPINE-CVE-2017-2885, DEBIAN-CVE-2017-2885, DSA-3929-1, SUSE-SU-2017:2129-1, SUSE-SU-2017:2130-1, SUSE-SU-2018:2204-1, SUSE-SU-2018:2204-2, UBUNTU-CVE-2017-2885, USN-3383-1
Key Facts
Patch in the next maintenance window- CVE-2017-2885 is a critical-severity vulnerability (CVSS 9.8 v3.1) affecting Libsoup (Gnome), Debian Linux, Enterprise Linux Desktop (Redhat) and 12 more products.
- It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
- EPSS estimates a 23% probability of exploitation in the next 30 days.
- Fixed versions are available, including Libsoup 0:2.56.0-4.el7_4, Libsoup 2.44.2-2.3.1, Libsoup 2.52.2-r1.
- Brandefense priority: patch in the next maintenance window, because of its high severity, although no exploitation is known.
Scores
CVSS v3.1
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS (30-day exploit likelihood)
23%
Higher than 97.7% of all scored CVEs
Exploit maturity
Proof of concept
ATLAS score
43/100
Publication score, see How it works
Exploitation Verdict
KEV listed
Not listed
Federal due date
None
No federal due date
Ransomware use
Not reported
Attributed actors
None named
Exploit & Defence Guidance
Exploit maturity
Proof of concept
Public exploit code
1
Proof-of-concept links
In-the-wild evidence
2
Reports of active use
Advisories And Exploit References
Description
An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability.
Affected Products
147 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| LibsoupGnome | 2.58, >= 2.58 | 2.58.2-1 |
| Debian LinuxDebian | 8.0, 9.0 | n/a |
| Enterprise Linux DesktopRedhat | 7.0 | n/a |
| Enterprise Linux ServerRedhat | 7.0 | n/a |
| Enterprise Linux Server AusRedhat | 7.4 | n/a |
Patched Releases
Libsoup
0:2.56.0-4.el7_4, 2.44.2-2.3.1, 2.52.2-r1, 2.53.90-3.ph1, 2.54.1-5.1, 2.54.1-5.3.1, 2.54.1-r1, 2.56.0-4.el7_4, 2.56.1-r0, 2.57.1-3.ph2, 2.58.2-1, 2.58.2-r0, 2.62.2-5.7.1, 2.62.2-8.1
libsoup-2_4-1
2.44.2-2.3.1, 2.54.1-5.1, 2.54.1-5.3.1, 2.62.2-5.7.1, 2.62.2-8.1, 2.72.0-2.5
libsoup-2_4-1-32bit
2.44.2-2.3.1, 2.54.1-5.1, 2.54.1-5.3.1, 2.62.2-5.7.1, 2.62.2-8.1, 2.72.0-2.5
libsoup-devel
2.54.1-5.1, 2.54.1-5.3.1, 2.56.0-4.el7_4, 2.62.2-5.7.1, 2.62.2-8.1, 2.72.0-2.5
libsoup-devel-32bit
2.54.1-5.1, 2.62.2-8.1, 2.72.0-2.5
libsoup-lang
2.44.2-2.3.1, 2.54.1-5.1, 2.54.1-5.3.1, 2.62.2-5.7.1, 2.62.2-8.1, 2.72.0-2.5
libsoup2.4
2.44.2-1ubuntu2.2, 2.48.0-1+deb8u1, 2.52.2-1ubuntu0.2, 2.56.0-2+deb9u1, 2.56.1-1
typelib-1_0-Soup-2_4
2.44.2-2.3.1, 2.54.1-5.1, 2.54.1-5.3.1, 2.62.2-5.7.1, 2.62.2-8.1, 2.72.0-2.5
Timeline
Publicly disclosed
Apr 24, 2018
Last updated
Aug 7, 2026
Weakness Type
- CWE-121 Stack-based Buffer Overflow
- CWE-787 Out-of-bounds Write
References
- advisorysecurity.alpinelinux.org · CVE-2017-2885
- advisorysecurity-tracker.debian.org · CVE-2017-2885
- advisoryubuntu.com · CVE-2017-2885
- advisorycve.org · CVERecord
- advisoryRHSA-2017:2459
FAQ
Common Questions.
An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58.
Affected: Libsoup (Gnome) versions 2.58, >= 2.58; Debian Linux versions 8.0, 9.0; Enterprise Linux Desktop (Redhat) versions 7.0, among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
No public exploit code is known.
Fixed versions are available, including Libsoup 0:2.56.0-4.el7_4, Libsoup 2.44.2-2.3.1, Libsoup 2.52.2-r1.
Brandefense priority: patch in the next maintenance window, because of its high severity, although no exploitation is known.
Is CVE-2017-2885 On Your Attack Surface?
Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.
Request A Demo