2666 matches found
libsoup: Memory leak on soup_header_parse_quality_list() via soup-headers.c
A flaw was found in libsoup. It is vulnerable to memory leaks in the soupheaderparsequalitylist function when parsing a quality list that contains elements with all zeroes...
libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in Content-Disposition header
A flaw was found in libsoup, where the soupmessageheadersgetcontentdisposition function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client or server that uses this function...
Important: Red Hat Security Advisory: libsoup security update
An update for libsoup is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
libsoup: Information disclosure may leads libsoup client sends Authorization header to a different host when being redirected by a server
A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impersonate the user to the original host that issued the redirect...
libsoup: Out of bounds reads in soup_headers_parse_request()
A flaw was found in libsoup, where the soupheadersparserequest function may be vulnerable to an out-of-bound read. This flaw allows a malicious user to use a specially crafted HTTP request to crash the HTTP server...
libsoup: Denial of service in server when client requests a large amount of overlapping ranges with Range header
A flaw was found in libsoup. The implementation of HTTP range requests is vulnerable to a resource consumption attack. This flaw allows a malicious client to request the same range many times in a single HTTP request, causing the server to use large amounts of memory. This does not allow for a fu...
The vulnerabilities of the functions sniff_feed_or_html() and skip_insignificant_space() in the GNOME graphical interface library libsoup allow a attacker to cause a service failure.
The vulnerabilities of the functions snifffeedorhtml and skipinsignificantspace in the GNOME graphical interface library libsoup are related to the lack of checks for buffer size and reading beyond the memory boundaries. Exploiting these vulnerabilities could allow a remote attacker to cause a...
RHEL 9 : libsoup (RHSA-2025:4440)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:4440 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: Integer overflow in appendparamquoted...
RHEL 9 : libsoup (RHSA-2025:4439)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:4439 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: Out of bounds reads in...
The vulnerability of the sniff_unknown() function in the GNOME graphical interface library libsoup allows a attacker to cause a service failure.
The vulnerability of the sniffunknown function in the GNOME graphical interface library libsoup is related to insufficient checking of exceptional states. Exploiting this vulnerability could allow a remote attacker to cause a service failure by sending a specially crafted POST request...
libsoup-2_4-1-2.74.3-9.1 on GA media (moderate)
libsoup-24-1-2.74.3-9.1 on GA media Announcement ID: openSUSE-SU-2025:15044-1 Rating: moderate Cross-References: CVE-2025-32907 CVE-2025-32914 CVE-2025-46420 CVE-2025-46421 CVSS scores: CVE-2025-32907 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-32907 SUSE : 8.7...
libsoup-3_0-0-3.6.5-3.1 on GA media (moderate)
libsoup-30-0-3.6.5-3.1 on GA media Announcement ID: openSUSE-SU-2025:15043-1 Rating: moderate Cross-References: CVE-2025-32907 CVSS scores: CVE-2025-32907 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-32907 SUSE : 8.7...
SUSE CVE-2025-4035
A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and includes an uppercase character. This bypasses public suffix protections and could allow a malicious website to set...
OPENSUSE-SU-2025:15043-1 libsoup-3_0-0-3.6.5-3.1 on GA media
These are all security issues fixed in the libsoup-30-0-3.6.5-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15044-1 libsoup-2_4-1-2.74.3-9.1 on GA media
These are all security issues fixed in the libsoup-24-1-2.74.3-9.1 package on the GA media of openSUSE Tumbleweed...
Important: libsoup
Issue Overview: A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skipinsightwhitespace function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server. CVE-2025-2784 Affected Packages...
Important: libsoup
Issue Overview: A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skipinsightwhitespace function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server. CVE-2025-2784 Affected Packages...
Amazon Linux 2 : libsoup (ALAS-2025-2841)
The version of libsoup installed on the remote host is prior to 2.56.0-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2841 advisory. A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the...
ROS-20250430-04
A vulnerability in the libsoup library of the GNOME GUI is related to an infinite loop when reading WebSocket data. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service GNOME GUI libsoup library vulnerability is related to NULL pointer dereferenci...