UBUNTU-CVE-2025-46421

A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impersonate the user to the original host that issued the redirect...

UBUNTU-CVE-2025-46420

A flaw was found in libsoup. It is vulnerable to memory leaks in the soupheaderparsequalitylist function when parsing a quality list that contains elements with all zeroes...

CVE-2025-46421

A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impersonate the user to the original host that issued the redirect...

CVE-2025-46421 Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server

A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impersonate the user to the original host that issued the redirect...

CVE-2025-46421

The CVE-2025-46421 issue affects the libsoup HTTP client library and causes information disclosure when a libsoup client follows an HTTP redirect: the client may send the Authorization header to the redirected host, enabling potential impersonation. Documented in multiple advisories across distri...

CVE-2025-46421 Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server

A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impersonate the user to the original host that issued the redirect...

CVE-2025-46421 Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server

A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impersonate the user to the original host that issued the redirect...

CVE-2025-46420 Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c

A flaw was found in libsoup. It is vulnerable to memory leaks in the soupheaderparsequalitylist function when parsing a quality list that contains elements with all zeroes...

CVE-2025-46420 Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c

A flaw was found in libsoup. It is vulnerable to memory leaks in the soupheaderparsequalitylist function when parsing a quality list that contains elements with all zeroes...

CVE-2025-46420 Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c

A flaw was found in libsoup. It is vulnerable to memory leaks in the soupheaderparsequalitylist function when parsing a quality list that contains elements with all zeroes...

CVE-2025-46420

CVE-2025-46420 affects libsoup. The issue is a memory leak in soup_header_parse_quality_list() when parsing a quality list containing all-zero elements. Affects libsoup (and libsoup3) across multiple distributions; CVSS indicates MEDIUM severity (6.5) with network attack vector and user interacti...

CVE-2025-46420

A flaw was found in libsoup. It is vulnerable to memory leaks in the soupheaderparsequalitylist function when parsing a quality list that contains elements with all zeroes...

SUSE CVE-2025-46420

A flaw was found in libsoup. It is vulnerable to memory leaks in the soupheaderparsequalitylist function when parsing a quality list that contains elements with all zeroes...

SUSE CVE-2025-46421

A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impersonate the user to the original host that issued the redirect...

libsoup 安全漏洞

libsoup is a GNOME HTTP client/server library from the GNOME Project. A security vulnerability exists in libsoup that stems from the client incorrectly sending an authorization header when handling HTTP redirects, which could lead to user identity impersonation...

PT-2025-17731

Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description A flaw was found in libsoup where clients encountering an HTTP redirect mistakenly send the HTTP Authorization header to the new host. This allows the new host to impersonate the user to the...

libsoup-2_4-1-2.74.3-8.1 on GA media (moderate)

libsoup-24-1-2.74.3-8.1 on GA media Announcement ID: openSUSE-SU-2025:15018-1 Rating: moderate Cross-References: CVE-2025-2784 CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVSS scores: CVE-2025-2784 SUSE : 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H CVE-2025-2784 SUSE : 8.3...

Azure Linux 3.0 Security Update: libsoup (CVE-2025-32906)

The version of libsoup installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32906 advisory. - A flaw was found in libsoup, where the soupheadersparserequest function May be vulnerable to an out- of-bou...

libsoup 安全漏洞

libsoup is a GNOME HTTP client/server library from the GNOME Project. A security vulnerability exists in libsoup, which stems from a memory leak in the soupheaderparsequalitylist function when parsing an all-zero quality list...

Azure Linux 3.0 Security Update: libsoup (CVE-2025-32913)

The version of libsoup installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32913 advisory. - A flaw was found in libsoup, where the soupmessageheadersgetcontentdisposition function is vulnerable to a...