2666 matches found
PT-2025-14758
Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description A flaw was found in the libsoup soup uri decode data uri function, which may crash when processing malformed data URI, allowing an attacker to cause a denial of service DoS. Recommendations A...
CBL Mariner 2.0 Security Update: libsoup (CVE-2024-52531)
The version of libsoup installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52531 advisory. - GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in...
RHEL 7 : libsoup (RHSA-2024:9654)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9654 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: HTTP request smuggling via stripping null bytes fr...
CBL Mariner 2.0 Security Update: libsoup (CVE-2024-52530)
The version of libsoup installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52530 advisory. - GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at...
CBL Mariner 2.0 Security Update: libsoup (CVE-2024-52532)
The version of libsoup installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52532 advisory. - GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain...
GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict.
...
GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations
...
GNOME libsoup before 3.6.1 has an infinite loop and memory consumption. during the reading of certain patterns of WebSocket data from clients.
...
CVE-2024-52531 affecting package libsoup for versions less than 3.0.4-2
CVE-2024-52531 affecting package libsoup for versions less than 3.0.4-2. A patched version of the package is available...
CVE-2024-52532 affecting package libsoup for versions less than 3.0.4-2
CVE-2024-52532 affecting package libsoup for versions less than 3.0.4-2. A patched version of the package is available...
CVE-2024-52530 affecting package libsoup for versions less than 3.0.4-2
CVE-2024-52530 affecting package libsoup for versions less than 3.0.4-2. A patched version of the package is available...
RLSA-2024:9573 Important: libsoup security update
The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: infinite loop while reading websocket data CVE-2024-52532 libsoup: HTTP request smuggling via stripping null bytes from the ends of header names CVE-2024-52530 For more details about the security...
libsoup security update
An update is available for libsoup. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libsoup packages provide an HTTP client and server library for GNOME...
RockyLinux 8 : libsoup (RLSA-2024:9573)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:9573 advisory. libsoup: infinite loop while reading websocket data CVE-2024-52532 libsoup: HTTP request smuggling via stripping null bytes from the ends of header names...
Oracle Linux 9 : libsoup (ELSA-2024-9559)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9559 advisory. - Backport upstream patch for CVE-2024-52532 - infinite loop while reading websocket data - Backport upstream patch for CVE-2024-52530 - HTTP request...
libsoup security update
2.72.0-8.el95.2 - Backport upstream patch for CVE-2024-52532 - infinite loop while reading websocket data - Resolves: RHEL-67068 2.72.0-8.el95.1 - Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names - Resolves: RHEL-67080...
RHSA-2024:9654 Red Hat Security Advisory: libsoup security update
Bulletin has no description...
RHSA-2024:9573 Red Hat Security Advisory: libsoup security update
Bulletin has no description...