7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
Roland Lezuo and Josselin Mouette discovered that the libsoup HTTP
library performs insufficient sanitising when parsing HTTP headers,
which might lead to denial of service.
For the stable distribution (sarge) this problem has been fixed in
version 2.2.3-2sarge1.
For the upcoming stable distribution (etch) this problem has been
fixed in version 2.2.98-2.
For the unstable distribution (sid) this problem has been fixed in
version 2.2.98-2.
We recommend that you upgrade your libsoup package.