FreeBSD : libsoup -- stack based buffer overflow (8e7bbddd-8338-11e7-867f-b499baebfeaf)

Tobias Mueller reports : libsoup is susceptible to a stack based buffer overflow attack when using chunked encoding. Regardless of libsoup being used as a server or client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

libsoup -- stack based buffer overflow

Tobias Mueller reports: libsoup is susceptible to a stack based buffer overflow attack when using chunked encoding. Regardless of libsoup being used as a server or client...

Updated libsoup packages fix security vulnerability

An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability CVE-2017-28...

MGASA-2017-0272 Updated libsoup packages fix security vulnerability

An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability CVE-2017-28...

openSUSE Security Update : libsoup (openSUSE-2017-914)

This update for libsoup fixes the following issues : - A bug in the HTTP Chunked Encoding code has been fixed that could have been exploited by attackers to cause a stack-based buffer overflow in client or server code running libsoup bsc1052916, CVE-2017-2885. This update was imported from the...

Slackware 14.1 / 14.2 / current : libsoup (SSA:2017-223-02)

New libsoup packages are available for Slackware 14.1, 14.2, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2017-223-02. The text itself is copyright ...

Fedora Update for libsoup FEDORA-2017-872a0a9a85

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for libsoup FEDORA-2017-b0ec173bd1

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 25 : libsoup (2017-872a0a9a85)

Security fix for CVE-2017-2885 stack based buffer overflow with HTTP Chunked Encoding. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 26 : libsoup (2017-b0ec173bd1)

Security fix for CVE-2017-2885 stack based buffer overflow with HTTP Chunked Encoding. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

[SECURITY] Fedora 26 Update: libsoup-2.58.2-1.fc26

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

Security update for libsoup (important)

This update for libsoup fixes the following issues: - A bug in the HTTP Chunked Encoding code has been fixed that could have been exploited by attackers to cause a stack-based buffer overflow in client or server code running libsoup bsc1052916, CVE-2017-2885. This update was imported from the...

openSUSE: Security Advisory for libsoup (openSUSE-SU-2017:2153-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[slackware-security] libsoup

New libsoup packages are available for Slackware 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libsoup-2.52.2-i586-3slack14.2.txz: Rebuilt. Fixed a chunked decoding buffer overrun that could be exploited against either...

SUSE SLED12 / SLES12 Security Update : libsoup (SUSE-SU-2017:2129-1)

This update for libsoup fixes the following issues : - A bug in the HTTP Chunked Encoding code has been fixed that could have been exploited by attackers to cause a stack-based buffer overflow in client or server code running libsoup bsc1052916, CVE-2017-2885. Note that Tenable Network Security h...

SUSE SLES12 Security Update : libsoup (SUSE-SU-2017:2130-1)

This update for libsoup fixes the following issues : - A bug in the HTTP Chunked Encoding code has been fixed that could have been exploited by attackers to cause a stack-based buffer overflow in client or server code running libsoup bsc1052916, CVE-2017-2885. Note that Tenable Network Security h...

RHEL 7 : libsoup (RHSA-2017:2459)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2459 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: A stack-based buffer overflow flaw was discovered within th...

Oracle Linux 7 : libsoup (ELSA-2017-2459)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2459 advisory. 2.56.0-4 - Fix chunked decoding buffer overrun CVE-2017-2885 rh 1479322 Tenable has extracted the preceding description block directly from the Oracle Linux...

GNOME libsoup stack buffer overflow vulnerability

GNOME libsoup is an HTTP client/server library developed by the GNOME project. A stack buffer overflow vulnerability exists in GNOME libsoup version 2.58, which originates when the program fails to properly perform bounds detection on user-submitted input, resulting in the size of copied data...

RedHat Update for libsoup RHSA-2017:2459-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...