GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. There is a plausible way to reach this remotely via soup_message_headers_get_content_type (e.g., an application may want to retrieve the content type of a request or response).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libsoupalma-upgrade-libsoup-devel | Jan 31, 2025 | Nov 11, 2024 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libsoupamazon-linux-ami-2-upgrade-libsoup-debuginfoamazon-linux-ami-2-upgrade-libsoup-devel | Dec 20, 2024 | Nov 11, 2024 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libsoupamazon-linux-2023-upgrade-libsoup-debuginfoamazon-linux-2023-upgrade-libsoup-debugsourceamazon-linux-2023-upgrade-libsoup-develamazon-linux-2023-upgrade-libsoup-doc | Feb 17, 2025 | Nov 11, 2024 | |
| Debian | debian-upgrade-libsoup2-4debian-upgrade-libsoup3 | Dec 16, 2024 | Nov 11, 2024 | |
| Dell Powerstore Dsa2025223 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | May 27, 2025 | |
| Dell Powerstore Dsa2025342 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Sep 2, 2025 | |
| Dell Powerstore Dsa2026039 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Jan 6, 2026 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libsouphuawei-euleros-2_0_sp10-upgrade-libsoup-help | Jan 14, 2025 | Nov 11, 2024 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-libsouphuawei-euleros-2_0_sp11-upgrade-libsoup-help | Feb 11, 2025 | Nov 11, 2024 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-libsouphuawei-euleros-2_0_sp12-upgrade-libsoup-help | Feb 11, 2025 | Nov 11, 2024 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libsouphuawei-euleros-2_0_sp9-upgrade-libsoup-help | Mar 18, 2025 | Nov 11, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-libsouporacle-linux-upgrade-libsoup-devel | Jan 29, 2025 | Nov 11, 2024 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-libsoupredhat-upgrade-libsoup-debuginforedhat-upgrade-libsoup-debugsourceredhat-upgrade-libsoup-devel | Jan 30, 2025 | Nov 11, 2024 | |
| Rocky_linux | rocky-upgrade-libsouprocky-upgrade-libsoup-debuginforocky-upgrade-libsoup-debugsourcerocky-upgrade-libsoup-devel | Feb 14, 2025 | Nov 11, 2024 | |
| Ubuntu | ubuntu-pro-upgrade-libsoup-3-0-0ubuntu-pro-upgrade-libsoup2-4-1ubuntu-upgrade-libsoup-2-4-1ubuntu-upgrade-libsoup-3-0-0ubuntu-upgrade-libsoup2-4-1 | Nov 28, 2024 | Nov 11, 2024 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Nov 11, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub