Lucene search
+L

2742 matches found

OSV
OSV
added 2025/10/23 10:15 a.m.2 views

DEBIAN-CVE-2025-12105

A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed twice due to missin...

7.5CVSS5.2AI score0.00426EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/23 10:15 a.m.9 views

UBUNTU-CVE-2025-12105

A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed twice due to missin...

7.5CVSS5.7AI score0.00426EPSS
SaveExploits0References5
CVE
CVE
added 2025/10/23 9:14 a.m.139 views

CVE-2025-12105

CVE-2025-12105 affects libsoup3 and is caused by a heap use-after-free in the asynchronous message queue handling during HTTP/2 read completion. When network operations are aborted at specific timing, a message queue item may be freed twice, enabling a remote attacker to trigger a denial-of-servi...

7.5CVSS6AI score0.00426EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/23 9:14 a.m.7 views

EUVD-2025-35663

A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed twice due to missin...

7.5CVSS5.9AI score0.00426EPSS
SaveExploits0References3
OSV
OSV
added 2025/10/23 9:14 a.m.7 views

CVE-2025-12105 Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion

A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed twice due to missin...

7.5CVSS6.9AI score
SaveExploits0References9
Cvelist
Cvelist
added 2025/10/23 9:14 a.m.17 views

CVE-2025-12105 Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion

A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed twice due to missin...

7.5CVSS0.00426EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/10/23 9:14 a.m.2 views

CVE-2025-12105 Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion

A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed twice due to missin...

7.5CVSS6AI score0.00426EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2025/10/23 9:14 a.m.10 views

CVE-2025-12105

A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed twice due to missin...

7.5CVSS5.7AI score0.00426EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2025/10/23 9:14 a.m.9 views

CVE-2025-12105

A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed twice due to missin...

7.5CVSS5.2AI score0.00426EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/10/23 9:14 a.m.8 views

CVE-2025-12105

A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed twice due to missin...

7.5CVSS5.9AI score0.00426EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/10/23 12:00 a.m.7 views

PT-2025-43435

Name of the Vulnerable Software and Affected Versions libsoup versions prior to 3.6.5-1ubuntu0.3 Description The libsoup library contains a flaw in its asynchronous message queue handling, specifically when managing HTTP/2 communications. When network operations are aborted at certain times, an...

7.5CVSS6.4AI score0.00426EPSS
SaveExploits0References83
CNNVD
CNNVD
added 2025/10/23 12:00 a.m.6 views

libsoup 资源管理错误漏洞

libsoup is a GNOME HTTP client/server library from the GNOME Project. A resource management error vulnerability exists in libsoup that stems from a lack of state synchronization in asynchronous message queue processing, which could lead to post-release reuse and denial of service attacks...

7.5CVSS6.3AI score0.00426EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/10/16 12:00 a.m.7 views

AlmaLinux 10 : libsoup3 (ALSA-2025:18183)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:18183 advisory. libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library CVE-2025-11021 Tenable has extracted the preceding description block directly from th...

7.5CVSS7.3AI score0.00636EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2025/10/15 8:35 p.m.9 views

Important: Red Hat Security Advisory: libsoup3 security update

An update for libsoup3 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

7.5CVSS6.8AI score0.00636EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2025/10/15 8:35 p.m.6 views

libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in...

7.5CVSS7.3AI score0.00636EPSS
SaveExploits0References5
OSV
OSV
added 2025/10/15 12:00 a.m.8 views

ALSA-2025:18183 Important: libsoup3 security update

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

7.5CVSS6.9AI score0.00636EPSS
SaveExploits0References4
OPENSUSE Linux
OPENSUSE Linux
added 2025/10/15 12:00 a.m.6 views

libsoup-3_0-0-3.6.5-7.1 on GA media (moderate)

libsoup-30-0-3.6.5-7.1 on GA media Announcement ID: openSUSE-SU-2025:15633-1 Rating: moderate Cross-References: CVE-2025-11021 CVSS scores: CVE-2025-11021 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2025-11021 SUSE : 8.2...

8.2CVSS7.2AI score0.00636EPSS
SaveExploits0
Broadcom
Broadcom
added 2025/10/15 12:00 a.m.21 views

Rocky Linux Updates in ASCG 3.3.0a (OVA)

Multiple Rocky Linux updates applied to Brocade ASCG 3.3.0a RockyLinux 8:perl RLSA-2025:11805 perl: Perl threads have a working directory race condition where file operations may target unintended paths CVE-2025-40909 RockyLinux 8:libxslt RLSA-2025:3615 libxslt: Use-After-Free in libxslt numbers....

9CVSS6.6AI score0.75832EPSS
SaveExploits38
OSV
OSV
added 2025/10/14 12:00 a.m.5 views

OPENSUSE-SU-2025:15633-1 libsoup-3_0-0-3.6.5-7.1 on GA media

These are all security issues fixed in the libsoup-30-0-3.6.5-7.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS5.8AI score0.00636EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/10/09 7:51 p.m.210 views

Exploit for CVE-2025-4476

CVE-2025-4476-Exploit A small Python test client to send HTTP...

4.3CVSS6.8AI score0.00385EPSS
SaveExploits1
Rows per page
Query Builder