2666 matches found
PT-2025-16240
Name of the Vulnerable Software and Affected Versions: libsoup affected versions not specified Description: A flaw was found in libsoup, where the HTTP/2 server may not fully validate the values of pseudo-headers :scheme, :authority, and :path. This could allow a user to cause a denial of service...
MGASA-2024-0382 Updated libsoup3 & libsoup packages fix security vulnerabilities
GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header. CVE-2024-52530 GNOME libsoup before 3.6.1...
Updated libsoup3 & libsoup packages fix security vulnerabilities
GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header. CVE-2024-52530 GNOME libsoup before 3.6.1...
OESA-2024-2479 libsoup3 security update
Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. Security Fixes: GNOME libsoup before 3.6.1 has an infinite loop, and memory...
[SECURITY] Fedora 41 Update: mingw-libsoup-2.74.3-8.fc41
Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...
PT-2025-16239
Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description A flaw was found in the implementation of HTTP range requests in libsoup, making it vulnerable to a resource consumption attack. This allows a malicious client to request the same range many...
Fedora 41 : mingw-libsoup (2024-af077c1f85)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-af077c1f85 advisory. Backport fixes for CVE-2024-52530 and CVE-2024-52532. Tenable has extracted the preceding description block directly from the Fedora security...
USN-7126-1 libsoup2.4 vulnerabilities
It was discovered that libsoup ignored certain characters at the end of header names. A remote attacker could possibly use this issue to perform a HTTP request smuggling attack. CVE-2024-52530 It was discovered that libsoup did not correctly handle memory while performing UTF-8 conversions. An...
USN-7126-1: libsoup vulnerabilities
It was discovered that libsoup ignored certain characters at the end of header names. A remote attacker could possibly use this issue to perform a HTTP request smuggling attack. CVE-2024-52530 It was discovered that libsoup did not correctly handle memory while performing UTF-8 conversions. An...
USN-7127-1: libsoup3 vulnerabilities
It was discovered that libsoup ignored certain characters at the end of header names. A remote attacker could possibly use this issue to perform a HTTP request smuggling attack. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. CVE-2024-52530 It was discovered that libsoup did not...
Fedora: Security Advisory (FEDORA-2024-8c3476dd24)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : libsoup vulnerabilities (USN-7126-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7126-1 advisory. It was discovered that libsoup ignored certain characters at the end of header names. A remote attacker could...
Fedora 40 : mingw-libsoup (2024-8c3476dd24)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-8c3476dd24 advisory. Backport fixes for CVE-2024-52530 and CVE-2024-52532. Tenable has extracted the preceding description block directly from the Fedora security...
CVE-2024-52530 affecting package libsoup for versions less than 3.4.4-2
CVE-2024-52530 affecting package libsoup for versions less than 3.4.4-2. A patched version of the package is available...
CVE-2024-52532 affecting package libsoup for versions less than 3.4.4-2
CVE-2024-52532 affecting package libsoup for versions less than 3.4.4-2. A patched version of the package is available...
CVE-2024-52531 affecting package libsoup for versions less than 3.4.4-2
CVE-2024-52531 affecting package libsoup for versions less than 3.4.4-2. A patched version of the package is available...
PT-2025-16238
Name of the Vulnerable Software and Affected Versions: libsoup affected versions not specified Description: A flaw was found in libsoup, where the soup headers parse request function may be vulnerable to an out-of-bound read. This flaw allows a malicious user to use a specially crafted HTTP reque...
OESA-2024-2471 libsoup security update
libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fixes: GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations...