CVE:CVE-2017-2885
CNNVD:CNNVD-201708-667
GNOME libsoup是GNOME项目所开发的一个HTTP客户端/服务器库。
GNOME libsoup 2.58版本中存在基于栈的缓冲区溢出漏洞，该漏洞源于程序没有正确的对用户提交的输入执行边界检测，导致复制数据的大小超过了分配的内存缓冲区空间。远程攻击者可通过发送HTTP请求利用该漏洞执行任意代码或造成拒绝服务。
solution:Upgrade gnome libsoup to a higher version than 2.58,and avoid the version 2.58; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.4,and avoid the version 7.4; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.4,7.5,and avoid the version 7.4,7.5; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.4,and avoid the version 7.4; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0