Lucene search

K
osvGoogleOSV:DSA-1248-1
HistoryJan 12, 2007 - 12:00 a.m.

libsoup

2007-01-1200:00:00
Google
osv.dev
5

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

Roland Lezuo and Josselin Mouette discovered that the libsoup HTTP
library performs insufficient sanitising when parsing HTTP headers,
which might lead to denial of service.

For the stable distribution (sarge) this problem has been fixed in
version 2.2.3-2sarge1.

For the upcoming stable distribution (etch) this problem has been
fixed in version 2.2.98-2.

For the unstable distribution (sid) this problem has been fixed in
version 2.2.98-2.

We recommend that you upgrade your libsoup package.

CPENameOperatorVersion
libsoupeq2.2.3-2

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C