CVE-2011-2524
libsoup2.4 - directory traversal
EPSS 0.85%
Description
Directory traversal vulnerability in soup-uri.c in SoupServer in libsoup before 2.35.4 allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in a URI.
How to fix CVE-2011-2524
To remediate CVE-2011-2524, upgrade the affected package to a fixed version below.
- Debian/libsoup2.4—upgrade to 2.34.3-1 or later
- Debian/libsoup2.4—upgrade to 2.30.2-1+squeeze1 or later
Is CVE-2011-2524 being exploited?
Low — EPSS is 0.9%, meaning exploitation activity has not been observed at scale.
Affected packages (2)
- from 0, < 2.34.3-1
- from 0, < 2.30.2-1+squeeze1