The vulnerability of the soup_multipart_new_from_message() function in the libsoup library, a graphical interface library for GNOME, allows a attacker to cause a service failure.

The vulnerability of the soupmultipartnewfrommessage function in the GNOME graphical interface library libsoup is related to the possibility of integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the libsoup library, related to the exposure of system data to unauthorized individuals, allows a violator to disclose protected information.

The vulnerability of the libsoup library relates to the exposure of system data by unauthorized individuals. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the soup_uri_decode_data_uri() function in the GNOME graphical interface library libsoup allows a attacker to cause a service failure.

The vulnerability of the soupuridecodedatauri function in the libsoup library, a GNOME graphical interface library, is related to insufficient checking of exceptional states. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafted POST reque...

The vulnerability of the HTTP digest-authentication mechanism used by the GNOME graphical interface library libsoup, which allows a attacker to trigger a service denial-of-service attack.

The vulnerability of the HTTP digest-authentication mechanism used by the GNOME graphical interface library libsoup is related to pointer dereferencing errors. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending a specially crafted POST request...

The vulnerability in the WebSocket protocol implementation of the libsoup graphical interface library for GNOME allows a attacker to cause a service failure.

The vulnerability of the WebSocket protocol implementation in the GNOME graphical interface library libsoup is related to pointer dereferencing errors. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending a specially crafted POST request...

RHSA-2025:9179 Red Hat Security Advisory: libsoup security update

Bulletin has no description...

libsoup: Double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" GHashTable value

A use-after-free type vulnerability was found in libsoup, in the soupmessageheadersgetcontentdisposition function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server...

libsoup: Denial of Service attack to websocket server

A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service DoS...

libsoup: Heap buffer over-read in `skip_insignificant_space` when sniffing content

A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skipinsightwhitespace function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server...

libsoup: Out of bounds reads in soup_headers_parse_request()

A flaw was found in libsoup, where the soupheadersparserequest function may be vulnerable to an out-of-bound read. This flaw allows a malicious user to use a specially crafted HTTP request to crash the HTTP server...

libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in Content-Disposition header

A flaw was found in libsoup, where the soupmessageheadersgetcontentdisposition function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client or server that uses this function...

Important: Red Hat Security Advisory: libsoup security update

An update for libsoup is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

libsoup: OOB Read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process

A flaw was found in libsoup, where the soupmultipartnewfrommessage function is vulnerable to an out-of-bounds read. This flaw allows a malicious HTTP client to induce the libsoup server to read out of bounds...

libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup

A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the library processes specially crafted multipart messages. Due to improper validation, an internal...

RHEL 7 : libsoup (RHSA-2025:9179)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:9179 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: Heap buffer over-read in...

Astra Linux – Vulnerability in libsoup3, libsoup2.4

A flaw was discovered in libsoup. The libsoup appendparamquoted function may contain an overflow bug, which can lead to a buffer under-read...

Astra Linux – Vulnerability in libsoup3, libsoup2.4

A use-after-free vulnerability was discovered in libsoup, within the soupmessageheadersgetcontentdisposition function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server...

Astra Linux – Vulnerability in libsoup3, libsoup2.4

A flaw was discovered in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly used by GNOME and other applications for handling web communications. The issue arises when the library processes specially crafted multipart messages. Due to improper validation, an...

Astra Linux – Vulnerability in libsoup3, libsoup2.4

A flaw was discovered in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which could cause libsoup to allocate memory and lead to a denial of service DoS attack...

Astra Linux – Vulnerability in libsoup2.4, libsoup3

GNOME libsoup before version 3.6.0 allowed HTTP request smuggling in certain configurations, because '\0' characters at the end of header names were ignored. In other words, a header with the format "Transfer-Encoding\0: chunked" was treated the same as a header with the format "Transfer-Encoding...