A flaw was found in libsoup's SoupServer HTTP Range header processing. The sort_ranges() comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than INT_MAX. This causes silent omission of requested byte ranges from HTTP 206 Partial Content responses on resources larger than approximately 2 GB.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade libsoup-debuginfoUpgrade libsoup-docUpgrade libsoup-debugsourceUpgrade libsoup3-develUpgrade libsoup3-debuginfoUpgrade libsoup3-docUpgrade libsoupUpgrade libsoup-develUpgrade libsoup3Upgrade libsoup3-debugsource | Sep 30, 2026 | Aug 20, 2026 |
| Redhat_linux | — | No solution exists | Aug 24, 2026 | Jul 13, 2026 |
| Ubuntu | — | Upgrade gir1.2-soup-2.4 (Ubuntu Pro)Upgrade libsoup-2.4-1Upgrade gir1.2-soup-3.0 (Ubuntu Pro)Upgrade libsoup-gnome2.4-1Upgrade libsoup2.4-dev (Ubuntu Pro)Upgrade libsoup2.4-common (Ubuntu Pro)Upgrade libsoup2.4-devUpgrade libsoup-gnome2.4-dev (Ubuntu Pro)Upgrade libsoup-3.0-dev (Ubuntu Pro)Upgrade libsoup-gnome2.4-devUpgrade libsoup-2.4-1 (Ubuntu Pro)Upgrade libsoup-3.0-devUpgrade libsoup-gnome-2.4-1 (Ubuntu Pro)Upgrade libsoup2.4-commonUpgrade libsoup2.4-1Upgrade gir1.2-soup-2.4Upgrade gir1.2-soup-3.0Upgrade libsoup2.4-1 (Ubuntu Pro)Upgrade libsoup-3.0-commonUpgrade libsoup-3.0-0Upgrade libsoup-3.0-common (Ubuntu Pro)Upgrade libsoup-gnome-2.4-1Upgrade libsoup-gnome2.4-1 (Ubuntu Pro)Upgrade libsoup-3.0-0 (Ubuntu Pro) | Oct 7, 2026 | Oct 6, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub