CVE-2011-2524
N/A
Published: August 31, 2011 at 11:00 PM UTC
Updated: June 16, 2026 at 11:31 PM UTC
1 product affected across 1 vendorLibsoup
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
Directory traversal vulnerability in soup-uri.c in SoupServer in libsoup before 2.35.4 allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in a URI.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 2.35.32.02.22.2.02.2.12.2.1002.2.1012.2.1022.2.1032.2.1042.2.22.2.32.2.42.2.52.2.62.2.6.12.2.72.2.912.2.922.2.932.2.942.2.95.12.2.962.2.972.2.982.2.992.23.12.23.62.23.912.23.922.24.0.12.24.12.25.22.25.32.25.42.25.52.25.912.26.02.26.12.27.12.27.22.27.42.27.52.27.902.27.912.27.922.28.02.28.12.29.32.29.52.29.62.29.902.29.912.3.0.12.3.22.3.42.30.02.30.12.31.22.31.62.31.902.31.922.32.02.32.12.32.22.33.42.33.52.33.62.33.902.33.922.34.02.34.12.4.02.4.1
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (8)
Vendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063431.htmlVendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2011/dsa-2369Vendor Advisoryx_refsource_REDHAT
Source: [email protected]
http://www.redhat.com/support/errata/RHSA-2011-1102.htmlQuick Info
StatusMODIFIED
CWE
CWE-22
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card