CVE-2018-12910

The getcookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname...

[SECURITY] Fedora 27 Update: libsoup-2.60.3-2.fc27

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

CVE-2018-12910: Out-of-bounds Read

The getcookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname...

Fedora Update for libsoup FEDORA-2018-fb2afee474

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : libsoup vulnerability (USN-3701-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3701-1 advisory. It was discovered that libsoup incorrectly handled certain cookie requests. An attacker could possibly use this to cause a denial of...

CVE-2018-12910

An out-of-bounds read has been discovered in libsoup when getting cookies from a URI with empty hostname. An attacker may use this flaw to cause a crash in the application...

USN-3701-1: libsoup vulnerability

It was discovered that libsoup incorrectly handled certain cookie requests. An attacker could possibly use this to cause a denial of service...

USN-3701-1 libsoup2.4 vulnerability

It was discovered that libsoup incorrectly handled certain cookie requests. An attacker could possibly use this to cause a denial of service...

[SECURITY] Fedora 28 Update: libsoup-2.62.2-2.fc28

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

CVE-2018-12910

The getcookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname...

PT-2018-2300

Name of the Vulnerable Software and Affected Versions libsoup version 2.63.2 Description The issue is related to errors in input data processing in the get cookies function of the libsoup HTTP library. It may allow a remote attacker to execute arbitrary code using an empty hostname. Recommendatio...

UBUNTU-CVE-2018-12910

The getcookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname...

Critical Photon OS Security Update - PHSA-2018-0060

Updates of 'libtiff', 'libsoup', 'glibc' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-2.0-0060

An update of 'libtiff', 'glibc', 'libsoup' packages of Photon OS has been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0149

An update of 'openssl', 'libsoup' packages of Photon OS has been released...

Critical Photon OS Security Update - PHSA-2018-0149

Updates of 'openssl', 'libsoup' packages of Photon OS have been released...

Security Bulletin: A vulnerability in libsoup affects PowerKVM

Summary PowerKVM is affected by a vulnerability in libsoup. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-2885 DESCRIPTION: GNOME libsoup is vulnerable to a stack-based buffer overflow, caused by improper bounds checking with HTTP Chunked Encoding. By sending a...

CVE-2018-11712

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections...

DEBIAN-CVE-2018-11713

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy settings for WebSocket connections. As a result, users could be deanonymized by...

Design/Logic Flaw

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy settings for WebSocket connections. As a result, users could be deanonymized by...