GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsoupUpgrade libsoup-devel | Nov 18, 2024 | Nov 11, 2024 |
| Amazon Linux Ami 2 | — | Upgrade libsoup-debuginfoUpgrade libsoup-develUpgrade libsoup | Dec 20, 2024 | Nov 11, 2024 |
| Amazon_linux_2023 | — | Upgrade libsoup-debuginfoUpgrade libsoup-develUpgrade libsoup-docUpgrade libsoupUpgrade libsoup-debugsource | Feb 17, 2025 | Nov 11, 2024 |
| Debian | — | Upgrade libsoup3Upgrade libsoup2.4 | Dec 16, 2024 | Nov 11, 2024 |
| Dell Powerstore Dsa2025223 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 15, 2026 | May 27, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libsoupUpgrade libsoup-help | Jan 14, 2025 | Nov 11, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libsoupUpgrade libsoup-help | Feb 11, 2025 | Nov 11, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libsoup-helpUpgrade libsoup | Feb 11, 2025 | Nov 11, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsoup-helpUpgrade libsoup | Mar 18, 2025 | Nov 11, 2024 |
| Oracle_linux | — | Upgrade libsoupUpgrade libsoup-devel | Nov 21, 2024 | Nov 11, 2024 |
| Redhat_linux | — | No solution existsUpgrade libsoupUpgrade libsoup-develUpgrade libsoup-debuginfoUpgrade libsoup-debugsource | Nov 14, 2024 | Nov 11, 2024 |
| Rocky_linux | — | Upgrade libsoup-debuginfoUpgrade libsoupUpgrade libsoup-develUpgrade libsoup-debugsource | Nov 20, 2024 | Nov 11, 2024 |
| Ubuntu | — | Upgrade libsoup2.4-1 (Ubuntu Pro)Upgrade libsoup-3.0-0 (Ubuntu Pro)Upgrade libsoup-2.4-1Upgrade libsoup2.4-1Upgrade libsoup-3.0-0 | Nov 28, 2024 | Nov 11, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 11, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub