CVE-2024-52531: Out-of-bounds Write

GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soupheaderparseparamliststrict. There is a plausible way to reach this remotely via soupmessageheadersgetcontenttype e.g., an application may want to retrieve the content type of a request or...

CVE-2024-52530

GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header...

CVE-2024-52530

Versions of GNOME libsoup prior to 3.6.0 are vulnerable to HTTP request smuggling in certain configurations. The root cause is that the library ignores '' (null) characters at the end of header names; for example, a header named Transfer-Encoding is treated identically to Transfer-Encoding. This ...

CVE-2024-52530: Inconsistent Interpretation of HTTP Requests

GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header...

libsoup 缓冲区错误漏洞

libsoup is a GNOME HTTP client/server library from the GNOME Project. A security vulnerability exists in libsoup versions prior to 3.6.1, which stems from a buffer overflow in applications that allow UTF-8 conversions to be performed in the soupheaderparseparamliststrict...

CVE-2024-52532

GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients...

PT-2025-14757

Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description A flaw was found in the libsoup append param quoted function, which may contain an overflow bug resulting in a buffer under-read. Recommendations At the moment, there is no information about ...

[SECURITY] Fedora 40 Update: webkit2gtk4.0-2.46.1-2.fc40

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. This package contains WebKitGTK for GTK 3 and libsoup 2...

[SECURITY] Fedora 41 Update: webkit2gtk4.0-2.46.1-2.fc41

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. This package contains WebKitGTK for GTK 3 and libsoup 2...

RHSA-2017:2459 Red Hat Security Advisory: libsoup security update

Bulletin has no description...

RHSA-2011:1102 Red Hat Security Advisory: libsoup security update

Bulletin has no description...

RHSA-2009:0344 Red Hat Security Advisory: libsoup security update

Bulletin has no description...

PT-2024-35361

Name of the Vulnerable Software and Affected Versions GNOME libsoup versions prior to 3.6.1 Description The issue is related to an infinite loop and memory consumption during the reading of certain patterns of WebSocket data from clients. Recommendations For versions prior to 3.6.1, update to...

[SECURITY] Fedora 40 Update: webkit2gtk4.0-2.44.3-2.fc40

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. This package contains WebKitGTK for GTK 3 and libsoup 2...

PT-2024-10074

Name of the Vulnerable Software and Affected Versions GNOME libsoup versions prior to 3.6.1 Description The issue is related to a buffer overflow in the soup header parse param list strict function of the GNOME libsoup library. This overflow occurs in dynamic memory and is associated with...

Photon OS 2.0: Libsoup PHSA-2019-2.0-0161

An update of the libsoup package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0161. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2025-14756

Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description A flaw in libsoup allows the SoupWebsocketConnection to accept a large WebSocket message. This may cause libsoup to allocate memory and lead to a denial of service DoS. Recommendations At the...

OPENSUSE-SU-2024:10046-1 libsoup-2_4-1-2.56.0-1.1 on GA media

These are all security issues fixed in the libsoup-24-1-2.56.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10994-1 libsoup-2_4-1-2.72.0-2.5 on GA media

These are all security issues fixed in the libsoup-24-1-2.72.0-2.5 package on the GA media of openSUSE Tumbleweed...

libsoup bug fix and enhancement update

An update is available for libsoup. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.1...