CVE-2024-52532

GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients...

libsoup 安全漏洞

libsoup is a GNOME HTTP client/server library from the GNOME Project. A security vulnerability exists in libsoup versions prior to 3.6.0, which stems from allowing HTTP request smuggling in certain configurations...

CVE-2024-52532

GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients...

CVE-2024-52530

GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header...

PT-2025-14757

Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description A flaw was found in the libsoup append param quoted function, which may contain an overflow bug resulting in a buffer under-read. Recommendations At the moment, there is no information about ...

[SECURITY] Fedora 40 Update: webkit2gtk4.0-2.46.1-2.fc40

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. This package contains WebKitGTK for GTK 3 and libsoup 2...

[SECURITY] Fedora 41 Update: webkit2gtk4.0-2.46.1-2.fc41

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. This package contains WebKitGTK for GTK 3 and libsoup 2...

RHSA-2017:2459 Red Hat Security Advisory: libsoup security update

Bulletin has no description...

RHSA-2011:1102 Red Hat Security Advisory: libsoup security update

Bulletin has no description...

RHSA-2009:0344 Red Hat Security Advisory: libsoup security update

Bulletin has no description...

PT-2024-35361

Name of the Vulnerable Software and Affected Versions GNOME libsoup versions prior to 3.6.1 Description The issue is related to an infinite loop and memory consumption during the reading of certain patterns of WebSocket data from clients. Recommendations For versions prior to 3.6.1, update to...

[SECURITY] Fedora 40 Update: webkit2gtk4.0-2.44.3-2.fc40

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. This package contains WebKitGTK for GTK 3 and libsoup 2...

PT-2024-10074

Name of the Vulnerable Software and Affected Versions GNOME libsoup versions prior to 3.6.1 Description The issue is related to a buffer overflow in the soup header parse param list strict function of the GNOME libsoup library. This overflow occurs in dynamic memory and is associated with...

Photon OS 2.0: Libsoup PHSA-2019-2.0-0161

An update of the libsoup package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0161. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2025-14756

Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description A flaw in libsoup allows the SoupWebsocketConnection to accept a large WebSocket message. This may cause libsoup to allocate memory and lead to a denial of service DoS. Recommendations At the...

OPENSUSE-SU-2024:10994-1 libsoup-2_4-1-2.72.0-2.5 on GA media

These are all security issues fixed in the libsoup-24-1-2.72.0-2.5 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10046-1 libsoup-2_4-1-2.56.0-1.1 on GA media

These are all security issues fixed in the libsoup-24-1-2.56.0-1.1 package on the GA media of openSUSE Tumbleweed...

libsoup bug fix and enhancement update

An update is available for libsoup. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.1...

PT-2024-35360

Name of the Vulnerable Software and Affected Versions: GNOME libsoup versions prior to 3.6.0 Description: The issue allows HTTP request smuggling in some configurations because '0' characters at the end of header names are ignored. For example, a "Transfer-Encoding0: chunked" header is treated th...

RHEL 6 : libsoup (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libsoup: Crash in soupcookiejar.c:getcookies on empty hostnames CVE-2018-12910 Note that Nessus has not tested for...