CVE-2024-52530

GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header...

libsoup 缓冲区错误漏洞

libsoup is a GNOME HTTP client/server library from the GNOME Project. A security vulnerability exists in libsoup versions prior to 3.6.1, which stems from a buffer overflow in applications that allow UTF-8 conversions to be performed in the soupheaderparseparamliststrict...

CVE-2024-52530

CVE-2024-52530 affects GNOME libsoup (libsoup) prior to 3.6.0, where HTTP header parsing ignores trailing null characters in header names, causing a potential HTTP request smuggling vulnerability via a header like Transfer-Encoding\0: chunked. Connected documents confirm the issue across multiple...

PT-2025-14757

Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description A flaw was found in the libsoup append param quoted function, which may contain an overflow bug resulting in a buffer under-read. Recommendations At the moment, there is no information about ...

[SECURITY] Fedora 40 Update: webkit2gtk4.0-2.46.1-2.fc40

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. This package contains WebKitGTK for GTK 3 and libsoup 2...

[SECURITY] Fedora 41 Update: webkit2gtk4.0-2.46.1-2.fc41

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. This package contains WebKitGTK for GTK 3 and libsoup 2...

RHSA-2017:2459 Red Hat Security Advisory: libsoup security update

Bulletin has no description...

RHSA-2011:1102 Red Hat Security Advisory: libsoup security update

Bulletin has no description...

RHSA-2009:0344 Red Hat Security Advisory: libsoup security update

Bulletin has no description...

PT-2024-35361

Name of the Vulnerable Software and Affected Versions: GNOME libsoup versions prior to 3.6.1 Description: The issue is related to an infinite loop and memory consumption during the reading of certain patterns of WebSocket data from clients. Recommendations: For versions prior to 3.6.1, update to...

[SECURITY] Fedora 40 Update: webkit2gtk4.0-2.44.3-2.fc40

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. This package contains WebKitGTK for GTK 3 and libsoup 2...

PT-2024-10074

Name of the Vulnerable Software and Affected Versions: GNOME libsoup versions prior to 3.6.1 Description: The issue is related to a buffer overflow in the soup header parse param list strict function of the GNOME libsoup library. This overflow occurs in dynamic memory and is associated with...

Photon OS 2.0: Libsoup PHSA-2019-2.0-0161

An update of the libsoup package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0161. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2025-14756

Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description A flaw in libsoup allows the SoupWebsocketConnection to accept a large WebSocket message. This may cause libsoup to allocate memory and lead to a denial of service DoS. Recommendations At the...

OPENSUSE-SU-2024:10046-1 libsoup-2_4-1-2.56.0-1.1 on GA media

These are all security issues fixed in the libsoup-24-1-2.56.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10994-1 libsoup-2_4-1-2.72.0-2.5 on GA media

These are all security issues fixed in the libsoup-24-1-2.72.0-2.5 package on the GA media of openSUSE Tumbleweed...

libsoup bug fix and enhancement update

An update is available for libsoup. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.1...

PT-2024-35360

Name of the Vulnerable Software and Affected Versions: GNOME libsoup versions prior to 3.6.0 Description: The issue allows HTTP request smuggling in some configurations because '0' characters at the end of header names are ignored. For example, a "Transfer-Encoding0: chunked" header is treated th...

RHEL 6 : libsoup (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libsoup: Crash in soupcookiejar.c:getcookies on empty hostnames CVE-2018-12910 Note that Nessus has not tested for...

Fedora: Security Advisory (FEDORA-2024-a1246372a4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...