A flaw was found in libsoup. The HTTP/2 server in libsoup may not fully validate the values of pseudo-headers :scheme, :authority, and :path, which may allow a user to cause a denial of service (DoS).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libsoup3amazon-linux-2023-upgrade-libsoup3-debuginfoamazon-linux-2023-upgrade-libsoup3-debugsourceamazon-linux-2023-upgrade-libsoup3-develamazon-linux-2023-upgrade-libsoup3-doc | May 14, 2025 | Apr 14, 2025 | |
| Debian | no-fix-debian-deb-package | May 15, 2025 | Apr 14, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-libsoup3oracle-linux-upgrade-libsoup3-develoracle-linux-upgrade-libsoup3-doc | Jul 10, 2025 | Apr 14, 2025 |
| Redhat_linux | redhat-upgrade-libsoup3redhat-upgrade-libsoup3-debuginforedhat-upgrade-libsoup3-debugsourceredhat-upgrade-libsoup3-develredhat-upgrade-libsoup3-doc | Jul 9, 2025 | Apr 14, 2025 | |
| Suse | — | suse-upgrade-libsoup-3_0-0suse-upgrade-libsoup-3_0-0-32bitsuse-upgrade-libsoup-develsuse-upgrade-libsoup-devel-32bitsuse-upgrade-libsoup-langsuse-upgrade-typelib-1_0-soup-3_0 | Dec 5, 2025 | May 29, 2025 |
| Ubuntu | ubuntu-pro-upgrade-libsoup-3-0-0ubuntu-pro-upgrade-libsoup2-4-1ubuntu-upgrade-libsoup-2-4-1ubuntu-upgrade-libsoup-3-0-0ubuntu-upgrade-libsoup2-4-1 | May 29, 2025 | Apr 14, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jul 2, 2025 | Apr 14, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub