PT-2019-4774 · Gnome +2 · Libsoup +2

Name of the Vulnerable Software and Affected Versions: libsoup versions 2.65.1 through 2.68.1 Description: The issue is caused by a heap-based buffer over-read in the soup ntlm parse challenge function, located in soup-auth-ntlm.c, which fails to properly check the length of an NTLM message befor...

CVE-2019-17266: Out-of-bounds Read

libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soupntlmparsechallenge in soup-auth-ntlm.c does not properly check an NTLM message's length before proceeding with a memcpy...

NewStart CGSL CORE 5.04 / MAIN 5.04 : libsoup Vulnerability (NS-SA-2019-0048)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has libsoup packages installed that are affected by a vulnerability: - An out-of-bounds read has been discovered in libsoup when getting cookies from a URI with empty hostname. An attacker may use this flaw to cause a crash in...

Photon OS 1.0: Libsoup PHSA-2019-1.0-0236

An update of the libsoup package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0236. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Critical Photon OS Security Update - PHSA-2019-0161

Updates of 'linux-aws', 'linux', 'kubernetes', 'polkit', 'wget', 'linux-secure', 'elfutils', 'python2', 'mesos', 'glib', 'python3', 'libsoup', 'linux-esx', 'libvirt', 'tar', 'curl', 'libtiff', 'libarchive', 'zookeeper' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0161

An update of 'libarchive', 'elfutils', 'wget', 'go', 'curl', 'linux-secure', 'python2', 'kubernetes', 'linux-esx', 'linux-aws', 'libtiff', 'mesos', 'glib', 'libsoup', 'libvirt', 'zookeeper', 'tar', 'linux', 'polkit', 'python3' packages of Photon OS has been released...

Critical Photon OS Security Update - PHSA-2019-0236

Updates of 'python3', 'linux', 'tar', 'linux-esx', 'python2', 'polkit', 'libsoup' packages of Photon OS have been released...

Security Bulletin: A vulnerability in libsoup affects PowerKVM

Summary PowerKVM is affected by a vulnerability in libsoup. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-12910 DESCRIPTION: An unspecified error in getcookies function in soup-cookie-jar.c in libsoup has an unknown impact via an empty hostname. CVSS Base Score:...

EulerOS Virtualization for ARM 64 3.0.1.0 : libsoup (EulerOS-SA-2019-1392)

According to the versions of the libsoup package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The getcookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empt...

openSUSE: Security Advisory for libsoup (openSUSE-SU-2019:1310-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : libsoup (openSUSE-2019-1310)

This update for libsoup fixes the following issues : Security issue fixed : - CVE-2018-12910: Fix crash when handling empty hostnames bsc1100097. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

OPENSUSE-SU-2019:1310-1 Security update for libsoup

This update for libsoup fixes the following issues: Security issue fixed: - CVE-2018-12910: Fix crash when handling empty hostnames bsc1100097. This update was imported from the SUSE:SLE-15:Update update project...

Security update for libsoup (moderate)

openSUSE Security Update: Security update for libsoup Announcement ID: openSUSE-SU-2019:1310-1 Rating: moderate References: 1100097 Cross-References: CVE-2018-12910 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for libsoup...

[SECURITY] Fedora 30 Update: libsoup-2.66.1-2.fc30

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

EulerOS 2.0 SP5 : libsoup (EulerOS-SA-2019-1143)

According to the version of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Crash in soupcookiejar.c:getcookies on empty hostnames CVE-2018-12910 Note that Tenable Network Security has extracted the preceding description...

Photon OS 1.0: Libsoup PHSA-2018-1.0-0182

An update of the libsoup package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0182. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Libsoup PHSA-2018-1.0-0149

An update of the libsoup package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0149. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Libsoup PHSA-2018-2.0-0060

An update of the libsoup package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0060. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Libsoup PHSA-2018-2.0-0091

An update of the libsoup package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0091. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

The vulnerability of the get_cookies function in the HTTP library libsoup, which allows a hacker to execute arbitrary code.

The vulnerability of the getcookies function in the HTTP library libsoup is related to errors in input processing. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a null hostname...