GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. There is a plausible way to reach this remotely via soup_message_headers_get_content_type (e.g., an application may want to retrieve the content type of a request or response).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsoupUpgrade libsoup-devel | Jan 31, 2025 | Nov 11, 2024 |
| Amazon Linux Ami 2 | — | Upgrade libsoup-develUpgrade libsoupUpgrade libsoup-debuginfo | Dec 20, 2024 | Nov 11, 2024 |
| Amazon_linux_2023 | — | Upgrade libsoupUpgrade libsoup-develUpgrade libsoup-docUpgrade libsoup-debugsourceUpgrade libsoup-debuginfo | Feb 17, 2025 | Nov 11, 2024 |
| Debian | — | Upgrade libsoup2.4Upgrade libsoup3 | Dec 16, 2024 | Nov 11, 2024 |
| Dell Powerstore Dsa2025223 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 27, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libsoupUpgrade libsoup-help | Jan 14, 2025 | Nov 11, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libsoup-helpUpgrade libsoup | Feb 11, 2025 | Nov 11, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libsoupUpgrade libsoup-help | Feb 11, 2025 | Nov 11, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsoupUpgrade libsoup-help | Mar 18, 2025 | Nov 11, 2024 |
| Oracle_linux | — | Upgrade libsoupUpgrade libsoup-devel | Jan 29, 2025 | Nov 11, 2024 |
| Redhat_linux | — | Upgrade libsoup-debuginfoUpgrade libsoup-develUpgrade libsoupNo solution existsUpgrade libsoup-debugsource | Jan 30, 2025 | Nov 11, 2024 |
| Rocky_linux | — | Upgrade libsoup-develUpgrade libsoupUpgrade libsoup-debugsourceUpgrade libsoup-debuginfo | Feb 14, 2025 | Nov 11, 2024 |
| Ubuntu | — | Upgrade libsoup-3.0-0Upgrade libsoup-2.4-1Upgrade libsoup2.4-1Upgrade libsoup-3.0-0 (Ubuntu Pro)Upgrade libsoup2.4-1 (Ubuntu Pro) | Nov 28, 2024 | Nov 11, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 11, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub