GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsoup-develUpgrade libsoup | Nov 18, 2024 | Nov 11, 2024 |
| Amazon Linux Ami 2 | — | Upgrade libsoup-develUpgrade libsoupUpgrade libsoup-debuginfo | Dec 20, 2024 | Nov 11, 2024 |
| Amazon_linux_2023 | — | Upgrade libsoup-debugsourceUpgrade libsoup-develUpgrade libsoup-debuginfoUpgrade libsoupUpgrade libsoup-doc | Feb 17, 2025 | Nov 11, 2024 |
| Debian | — | Upgrade libsoup2.4Upgrade libsoup3 | Dec 16, 2024 | Nov 11, 2024 |
| Dell Powerstore Dsa2025223 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 15, 2026 | May 27, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libsoup-helpUpgrade libsoup | Jan 14, 2025 | Nov 11, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libsoupUpgrade libsoup-help | Feb 11, 2025 | Nov 11, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libsoupUpgrade libsoup-help | Feb 11, 2025 | Nov 11, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsoupUpgrade libsoup-help | Mar 18, 2025 | Nov 11, 2024 |
| Oracle_linux | — | Upgrade libsoupUpgrade libsoup-devel | Nov 21, 2024 | Nov 11, 2024 |
| Redhat_linux | — | Upgrade libsoupUpgrade libsoup-develNo solution existsUpgrade libsoup-debuginfoUpgrade libsoup-debugsource | Nov 14, 2024 | Nov 11, 2024 |
| Rocky_linux | — | Upgrade libsoup-develUpgrade libsoupUpgrade libsoup-debugsourceUpgrade libsoup-debuginfo | Nov 20, 2024 | Nov 11, 2024 |
| Ubuntu | — | Upgrade libsoup-3.0-0 (Ubuntu Pro)Upgrade libsoup-2.4-1Upgrade libsoup2.4-1 (Ubuntu Pro)Upgrade libsoup2.4-1Upgrade libsoup-3.0-0 | Nov 28, 2024 | Nov 11, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 11, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub