Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2017:2129-1

Опубликовано: 10 авг. 2017
Источник: suse-cvrf

Описание

Security update for libsoup

This update for libsoup fixes the following issues:

  • A bug in the HTTP Chunked Encoding code has been fixed that could have been exploited by attackers to cause a stack-based buffer overflow in client or server code running libsoup (bsc#1052916, CVE-2017-2885).

Список пакетов

SUSE Linux Enterprise Desktop 12 SP2
libsoup-2_4-1-2.54.1-5.3.1
libsoup-2_4-1-32bit-2.54.1-5.3.1
libsoup-lang-2.54.1-5.3.1
typelib-1_0-Soup-2_4-2.54.1-5.3.1
SUSE Linux Enterprise Desktop 12 SP3
libsoup-2_4-1-2.54.1-5.3.1
libsoup-2_4-1-32bit-2.54.1-5.3.1
libsoup-lang-2.54.1-5.3.1
typelib-1_0-Soup-2_4-2.54.1-5.3.1
SUSE Linux Enterprise Server 12 SP2
libsoup-2_4-1-2.54.1-5.3.1
libsoup-2_4-1-32bit-2.54.1-5.3.1
libsoup-lang-2.54.1-5.3.1
typelib-1_0-Soup-2_4-2.54.1-5.3.1
SUSE Linux Enterprise Server 12 SP3
libsoup-2_4-1-2.54.1-5.3.1
libsoup-2_4-1-32bit-2.54.1-5.3.1
libsoup-lang-2.54.1-5.3.1
typelib-1_0-Soup-2_4-2.54.1-5.3.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
libsoup-2_4-1-2.54.1-5.3.1
libsoup-lang-2.54.1-5.3.1
typelib-1_0-Soup-2_4-2.54.1-5.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
libsoup-2_4-1-2.54.1-5.3.1
libsoup-2_4-1-32bit-2.54.1-5.3.1
libsoup-lang-2.54.1-5.3.1
typelib-1_0-Soup-2_4-2.54.1-5.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
libsoup-2_4-1-2.54.1-5.3.1
libsoup-2_4-1-32bit-2.54.1-5.3.1
libsoup-lang-2.54.1-5.3.1
typelib-1_0-Soup-2_4-2.54.1-5.3.1
SUSE Linux Enterprise Software Development Kit 12 SP2
libsoup-devel-2.54.1-5.3.1
SUSE Linux Enterprise Software Development Kit 12 SP3
libsoup-devel-2.54.1-5.3.1

Ссылки

Описание

An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP2:libsoup-2_4-1-2.54.1-5.3.1
SUSE Linux Enterprise Desktop 12 SP2:libsoup-2_4-1-32bit-2.54.1-5.3.1
SUSE Linux Enterprise Desktop 12 SP2:libsoup-lang-2.54.1-5.3.1
SUSE Linux Enterprise Desktop 12 SP2:typelib-1_0-Soup-2_4-2.54.1-5.3.1
Ссылки
Уязвимость SUSE-SU-2017:2129-1