[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuw-XNmD3RFpGFC4Qlm9ct1EzCf6mE8Ry4s0cuuZ_1Z8":3,"g5a-risk:CVE-2017-2885":201},{"success":4,"data":5,"meta":199},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":27,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":44,"references":87,"referencesCount":118,"weaknesses":119,"weaknessesCount":128,"isActivelyExploited":129,"cisaInfo":27,"otxData":27,"relatedBlogPosts":130,"seoMetadata":131,"configurations":156,"relatedVendorCves":190,"notableEvents":191},"CVE-2017-2885","What is CVE-2017-2885?","An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability.","An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stack overflow result...","2018-04-24T19:29:02.783","2022-06-07T17:25:35.82",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":37,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":28,"ImpactScore":29},"talos-cna@cisco.com","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[38],{"Source":17,"Type":18,"CVSSData":39,"BaseSeverity":25,"ExploitabilityScore":44,"ImpactScore":45,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":40,"VectorString":41,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":42,"IntegrityImpact":42,"AvailabilityImpact":42,"BaseScore":43,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.23138,[46,46,46,46,46,46,46],"Critical",[50,55,60,63,68,71,75,78,81,84],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"gnome","libsoup","2.58","cpe:2.3:a:gnome:libsoup:2.58:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":61,"criteria":62,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":64,"product":65,"version":66,"criteria":67,"vulnerable":4},"redhat","enterprise_linux_desktop","7.0","cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",{"vendor":64,"product":69,"version":66,"criteria":70,"vulnerable":4},"enterprise_linux_server","cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",{"vendor":64,"product":72,"version":73,"criteria":74,"vulnerable":4},"enterprise_linux_server_aus","7.4","cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",{"vendor":64,"product":76,"version":73,"criteria":77,"vulnerable":4},"enterprise_linux_server_eus","cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",{"vendor":64,"product":76,"version":79,"criteria":80,"vulnerable":4},"7.5","cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",{"vendor":64,"product":82,"version":73,"criteria":83,"vulnerable":4},"enterprise_linux_server_tus","cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",{"vendor":64,"product":85,"version":66,"criteria":86,"vulnerable":4},"enterprise_linux_workstation","cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",[88,95,100,105,109,113],{"url":89,"source":90,"tags":91},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F160388\u002FProCaster-LE-32F430-GStreamer-souphttpsrc-libsoup-2.51.3-Stack-Overflow.html","Packetstormsecurity",[92,93,94],"Exploit","Third Party Advisory","VDB Entry",{"url":96,"source":97,"tags":98},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2020\u002FDec\u002F3","Seclists",[92,99,93],"Mailing List",{"url":101,"source":102,"tags":103},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F100258","Securityfocus",[104],"Broken Link",{"url":106,"source":107,"tags":108},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:2459","Red Hat",[93],{"url":110,"source":111,"tags":112},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2017\u002Fdsa-3929","Debian",[93],{"url":114,"source":115,"tags":116},"https:\u002F\u002Fwww.talosintelligence.com\u002Fvulnerability_reports\u002FTALOS-2017-0392","Talosintelligence",[92,117,93],"Technical Description",6,[120],{"id":121,"name":122,"description":123,"extendedDescription":124,"status":125,"abstraction":126,"structure":127},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":132,"metaDescription":133,"keywords":134,"canonicalUrl":135,"structuredData":136},"What is CVE-2017-2885? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-2885, a critical severity cyber security vulnerability from 2018. An exploitable stack based buffer overflow vulnerability...","CVE-2017-2885, CVE-2017-2885 vulnerability, CVE-2017-2885 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, gnome security, debian security, redhat security, libsoup vulnerability, debian_linux vulnerability, enterprise_linux_desktop vulnerability, enterprise_linux_server vulnerability, enterprise_linux_server_aus vulnerability","\u002Fwhat-is\u002Fcve-2017-2885",{"@context":137,"@type":138,"headline":132,"description":133,"datePublished":10,"dateModified":11,"author":139,"publisher":143,"about":147,"mainEntityOfPage":151,"articleSection":154,"keywords":155},"https:\u002F\u002Fschema.org","TechArticle",{"@type":140,"name":141,"url":142},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":140,"name":141,"url":142,"logo":144},{"@type":145,"url":146},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":148,"name":6,"description":149,"additionalType":150},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":152,"@id":153},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-2885","Cybersecurity","CVE-2017-2885, CVE-2017-2885 vulnerability, CVE-2017-2885 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[157,164,172],{"Operator":27,"Negate":27,"Nodes":158},[159],{"Operator":160,"Negate":27,"CPEMatch":161},"OR",[162],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":163,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"4BD5FB77-9583-4CFE-858A-774344AE8222",{"Operator":27,"Negate":27,"Nodes":165},[166],{"Operator":160,"Negate":27,"CPEMatch":167},[168,170],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":169,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":171,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Operator":27,"Negate":27,"Nodes":173},[174],{"Operator":160,"Negate":27,"CPEMatch":175},[176,178,180,182,184,186,188],{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":177,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"33C068A4-3780-4EAB-A937-6082DF847564",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":179,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"51EF4996-72F4-4FA4-814F-F5991E7A8318",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":181,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"D99A687E-EAE6-417E-A88E-D0082BC194CD",{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":183,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4",{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":185,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8",{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":187,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"D5F7E11E-FB34-4467-8919-2B6BEAABF665",{"Vulnerable":4,"Criteria":86,"MatchCriteriaID":189,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"825ECE2D-E232-46E0-A047-074B34DB1E97",[],[192],{"id":193,"eventType":194,"eventTime":195,"details":196,"label":197,"color":198},"59307226-7554-4b50-a11f-a4acf0f63281","HIGH_EPSS_DELTA","2026-06-16T04:06:22.731874+00:00","Daily EPSS score increased by 0.206 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":200,"version":40},1792372297058,{"score":202,"band":203,"action":204,"scoredAt":205},61,"Medium","Plan remediation","2026-10-16T06:43:55.601213+00:00"]