vulnerability

Red Hat: CVE-2025-32907: libsoup: Denial of service in server when client requests a large amount of overlapping ranges with Range header (Multiple Advisories)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Apr 14, 2025
Added
May 6, 2025
Modified
May 30, 2025

Description

A flaw was found in libsoup. The implementation of HTTP range requests is vulnerable to a resource consumption attack. This flaw allows a malicious client to request the same range many times in a single HTTP request, causing the server to use large amounts of memory. This does not allow for a full denial of service.

Solution(s)

redhat-upgrade-libsoupredhat-upgrade-libsoup-debuginforedhat-upgrade-libsoup-debugsourceredhat-upgrade-libsoup-develredhat-upgrade-mingw32-freetyperedhat-upgrade-mingw32-freetype-debuginforedhat-upgrade-mingw32-freetype-staticredhat-upgrade-mingw64-freetyperedhat-upgrade-mingw64-freetype-debuginforedhat-upgrade-mingw64-freetype-staticredhat-upgrade-spice-client-win-x64redhat-upgrade-spice-client-win-x86
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.