2666 matches found
CVE-2024-52530
CVE-2024-52530 affects GNOME libsoup (libsoup) prior to 3.6.0, where HTTP header parsing ignores trailing null characters in header names, causing a potential HTTP request smuggling vulnerability via a header like Transfer-Encoding\0: chunked. Connected documents confirm the issue across multiple...
CVE-2024-52530
GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header...
CVE-2024-52531
GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soupheaderparseparamliststrict. There is a plausible way to reach this remotely via soupmessageheadersgetcontenttype e.g., an application may want to retrieve the content type of a request or...
CVE-2024-52532
GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients...
CVE-2024-52532
GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients...
CVE-2024-52530
GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header...
libsoup 安全漏洞
libsoup is a GNOME HTTP client/server library from the GNOME Project. A security vulnerability exists in libsoup versions prior to 3.6.0, which stems from allowing HTTP request smuggling in certain configurations...
PT-2025-14757
Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description A flaw was found in the libsoup append param quoted function, which may contain an overflow bug resulting in a buffer under-read. Recommendations At the moment, there is no information about ...
[SECURITY] Fedora 40 Update: webkit2gtk4.0-2.46.1-2.fc40
WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. This package contains WebKitGTK for GTK 3 and libsoup 2...
[SECURITY] Fedora 41 Update: webkit2gtk4.0-2.46.1-2.fc41
WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. This package contains WebKitGTK for GTK 3 and libsoup 2...
RHSA-2017:2459 Red Hat Security Advisory: libsoup security update
Bulletin has no description...
RHSA-2011:1102 Red Hat Security Advisory: libsoup security update
Bulletin has no description...
RHSA-2009:0344 Red Hat Security Advisory: libsoup security update
Bulletin has no description...
PT-2024-35361
Name of the Vulnerable Software and Affected Versions: GNOME libsoup versions prior to 3.6.1 Description: The issue is related to an infinite loop and memory consumption during the reading of certain patterns of WebSocket data from clients. Recommendations: For versions prior to 3.6.1, update to...
[SECURITY] Fedora 40 Update: webkit2gtk4.0-2.44.3-2.fc40
WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. This package contains WebKitGTK for GTK 3 and libsoup 2...
PT-2024-10074
Name of the Vulnerable Software and Affected Versions: GNOME libsoup versions prior to 3.6.1 Description: The issue is related to a buffer overflow in the soup header parse param list strict function of the GNOME libsoup library. This overflow occurs in dynamic memory and is associated with...
Photon OS 2.0: Libsoup PHSA-2019-2.0-0161
An update of the libsoup package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0161. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
PT-2025-14756
Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description A flaw in libsoup allows the SoupWebsocketConnection to accept a large WebSocket message. This may cause libsoup to allocate memory and lead to a denial of service DoS. Recommendations At the...