CVE-2017-2885: debian debian_linux Out-of-bounds Write
Vulnerability summary
CVE-2017-2885 is a critical (CVSS 9.8) Out-of-bounds Write vulnerability in debian debian_linux. EPSS estimates a 23.14% chance of exploitation in the next 30 days, higher than 97.7% of scored vulnerabilities. 3 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 3 · Related 3Timeline
- 24-04-2018PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability.
CVSS metrics
9 scores · 6 sources · 3 versions- OSV · AlpineEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- NVDNIST9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · Red hatEcosystem advisory · calculated7.3HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LDiffers
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
23.14%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
-0.41 pp
From 23.54% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundExploit Reference (seclists.org)
Maturity: unknown
Exploit Reference (talosintelligence.com)
Maturity: unknown
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Suse14 products
- libsoup&distro=SUSE Linux Enterprise Desktop 12 SP2< 2.54.1-5.3.1
- libsoup&distro=SUSE Linux Enterprise Desktop 12 SP3< 2.54.1-5.3.1
- libsoup&distro=SUSE Linux Enterprise Server 12 SP1-LTSS< 2.44.2-2.3.1
- libsoup&distro=SUSE Linux Enterprise Server 12 SP2< 2.54.1-5.3.1
- libsoup&distro=SUSE Linux Enterprise Server 12 SP3< 2.54.1-5.3.1
Redhat9 products
- enterprise_linux_desktop7.0
- enterprise_linux_server7.0
- enterprise_linux_server_aus7.4
- enterprise_linux_server_eus7.4 | 7.5
- enterprise_linux_server_tus7.4
Debian2 products
- libsoup2.4< 2.56.1-1 | < 2.48.0-1+deb8u1 | < 2.56.0-2+deb9u1
- debian_linuxEOL8.0 | 9.0
Mageia2 products
- libsoup< 2.48.1-1.1.mga5
- libsoup< 2.58.2-1.mga6
Alpine1 product
- libsoup< 2.52.2-r1 | < 2.54.1-r1 | < 2.56.1-r0 | < 2.58.2-r0
Gnome1 product
- libsoup2.58
Ubuntu1 product
- libsoup2.4< 2.44.2-1ubuntu2.2 | < 2.52.2-1ubuntu0.2
7 vendors · 30 products
References
23 links- access.redhat.com/errata/RHSA-2017:2459Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- www.talosintelligence.com/vulnerability_reports/TALOS-2017-0392X Refsource MISCExploitTechnical DescriptionThird Party AdvisoryARTICLE
