vulnerability

Huawei EulerOS: CVE-2024-52530: libsoup security update

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:C/A:N)
Published
Nov 11, 2024
Added
Feb 11, 2025
Modified
Aug 13, 2025

Description

GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header.

Solutions

huawei-euleros-2_0_sp12-upgrade-libsouphuawei-euleros-2_0_sp12-upgrade-libsoup-help
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.