A flaw was found in libsoup. It is vulnerable to memory leaks in the soup_header_parse_quality_list() function when parsing a quality list that contains elements with all zeroes.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libsoupalma-upgrade-libsoup-devel | May 9, 2025 | Apr 24, 2025 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libsoup3amazon-linux-2023-upgrade-libsoup3-debuginfoamazon-linux-2023-upgrade-libsoup3-debugsourceamazon-linux-2023-upgrade-libsoup3-develamazon-linux-2023-upgrade-libsoup3-doc | Oct 16, 2025 | Apr 24, 2025 | |
| Debian | debian-upgrade-libsoup3 | May 15, 2025 | Apr 24, 2025 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libsouphuawei-euleros-2_0_sp10-upgrade-libsoup-help | Jul 11, 2025 | Apr 24, 2025 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-libsouphuawei-euleros-2_0_sp11-upgrade-libsoup-help | Aug 13, 2025 | Jul 10, 2025 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-libsouphuawei-euleros-2_0_sp12-upgrade-libsoup-help | Jul 21, 2025 | Apr 24, 2025 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-libsouphuawei-euleros-2_0_sp13-upgrade-libsoup-help | Aug 13, 2025 | Jul 10, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-libsouporacle-linux-upgrade-libsoup-devel | May 8, 2025 | Apr 24, 2025 |
| Redhat_linux | redhat-upgrade-libsoupredhat-upgrade-libsoup-debuginforedhat-upgrade-libsoup-debugsourceredhat-upgrade-libsoup-devel | May 6, 2025 | Apr 24, 2025 | |
| Rocky_linux | rocky-upgrade-libsouprocky-upgrade-libsoup-debuginforocky-upgrade-libsoup-debugsourcerocky-upgrade-libsoup-devel | Jul 31, 2025 | Jul 29, 2025 | |
| Suse | — | suse-upgrade-libsoup-2_4-1suse-upgrade-libsoup-2_4-1-32bitsuse-upgrade-libsoup-3_0-0suse-upgrade-libsoup-3_0-0-32bitsuse-upgrade-libsoup-develsuse-upgrade-libsoup-devel-32bitsuse-upgrade-libsoup-langsuse-upgrade-libsoup2-develsuse-upgrade-libsoup2-devel-32bitsuse-upgrade-libsoup2-langsuse-upgrade-typelib-1_0-soup-2_4suse-upgrade-typelib-1_0-soup-3_0 | Dec 5, 2025 | May 8, 2025 |
| Ubuntu | ubuntu-pro-upgrade-libsoup-3-0-0ubuntu-pro-upgrade-libsoup2-4-1ubuntu-upgrade-libsoup-2-4-1ubuntu-upgrade-libsoup-3-0-0ubuntu-upgrade-libsoup2-4-1 | May 7, 2025 | Apr 24, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jul 2, 2025 | Apr 24, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub