Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2025-32909

Опубликовано: 14 апр. 2025
Источник: debian
EPSS Низкий

Описание

A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniff_mp4 function. The HTTP server may cause the libsoup client to crash.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
libsoup3fixed3.6.4-1package
libsoup3fixed3.2.3-0+deb12u1bookwormpackage
libsoup2.4fixed2.74.3-10.1package
libsoup2.4no-dsabookwormpackage

Примечания

  • https://gitlab.gnome.org/GNOME/libsoup/-/issues/431

  • Fixed by: https://gitlab.gnome.org/GNOME/libsoup/-/commit/ba4c3a6f988beff59e45801ab36067293d24ce92 (3.6.2)

EPSS

Процентиль: 67%
0.00524
Низкий

Связанные уязвимости

CVSS3: 5.3
ubuntu
12 месяцев назад

A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniff_mp4 function. The HTTP server may cause the libsoup client to crash.

CVSS3: 5.3
redhat
12 месяцев назад

A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniff_mp4 function. The HTTP server may cause the libsoup client to crash.

CVSS3: 5.3
nvd
12 месяцев назад

A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniff_mp4 function. The HTTP server may cause the libsoup client to crash.

CVSS3: 5.3
msrc
11 месяцев назад

Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c

CVSS3: 5.3
github
12 месяцев назад

A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniff_mp4 function. The HTTP server may cause the libsoup client to crash.

EPSS

Процентиль: 67%
0.00524
Низкий