2694 matches found
openSUSE 10 Security Update : libsoup (libsoup-2503)
This update fixes a bug in the HTTP header parsing code. Applications using this library maybe vulnerable to a remote denial-of-service attack. CVE-2006-5876 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...
Mandrake Linux Security Advisory : libsoup (MDKSA-2007:029)
The soupheadersparse function in soup-headers.c for libsoup HTTP library before 2.2.99 allows remote attackers to cause a denial of service crash via malformed HTTP headers, probably involving missing fields or values. The updated packages have been patched to correct this issue. %NASLMINLEVEL...
Fedora Core 6 : libsoup-2.2.99-1.fc6 (2007-109)
Update to the latest libsoup 2.2 release. This release fixes a security flaw that causes the libsoup server to crash when it receives a malformed HTTP GET header. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable h...
[SECURITY] Fedora Core 6 Update: libsoup-2.2.99-1.fc6
Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...
USN-411-1: libsoup vulnerability
Roland Lezuo and Josselin Mouette discovered that the HTTP server code in libsoup did not correctly verify request headers. Remote attackers could crash applications using libsoup by sending a crafted HTTP request, resulting in a denial of service...
Debian DSA-1248-1 : libsoup - missing input sanitising
Roland Lezuo and Josselin Mouette discovered that the libsoup HTTP library performs insufficient sanitising when parsing HTTP headers, which might lead to denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...
CVE-2006-5876
The soupheadersparse function in soup-headers.c for libsoup HTTP library before 2.2.99 allows remote attackers to cause a denial of service crash via malformed HTTP headers, probably involving missing fields or values...
CVE-2006-5876
The soupheadersparse function in soup-headers.c for libsoup HTTP library before 2.2.99 allows remote attackers to cause a denial of service crash via malformed HTTP headers, probably involving missing fields or values...
CVE-2006-5876
The soupheadersparse function in soup-headers.c for libsoup HTTP library before 2.2.99 allows remote attackers to cause a denial of service crash via malformed HTTP headers, probably involving missing fields or values...
CVE-2006-5876
CVE-2006-5876 affects libsoup’s soup_headers_parse in soup-headers.c (pre-2.2.99) and enables remote denial of service via malformed HTTP headers. The connected sources confirm a vendor patch for this issue (libsoup update to 2.2.99 and related openSUSE/SUSE advisories) and indicate a security up...
libsoup library DoS
DoS on parsing HTTP headers...
[SECURITY] [DSA 1248-1] New libsoup packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1248-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 12nd, 2007 http://www.debian.org/security/faq -...
DSA-1248-1 libsoup
Bulletin has no description...
PT-2009-6648 · Gnome +1 · Libsoup +1
Name of the Vulnerable Software and Affected Versions: libsoup versions 2.x.x before 2.2.x libsoup versions 2.x before 2.24 Description: The issue is related to an integer overflow in the soup base64 encode function, which allows context-dependent attackers to execute arbitrary code via a long...