Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fjfx-vwp2-gqr8

Опубликовано: 26 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of memory contents, potentially exposing sensitive information from the process using libsoup.

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of memory contents, potentially exposing sensitive information from the process using libsoup.

EPSS

Процентиль: 45%
0.00594
Низкий

7.5 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 7.5
ubuntu
10 месяцев назад

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of memory contents, potentially exposing sensitive information from the process using libsoup.

CVSS3: 7.5
redhat
10 месяцев назад

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of memory contents, potentially exposing sensitive information from the process using libsoup.

CVSS3: 7.5
nvd
10 месяцев назад

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of memory contents, potentially exposing sensitive information from the process using libsoup.

CVSS3: 7.5
msrc
10 месяцев назад

Libsoup: out-of-bounds read in cookie date handling of libsoup http library

CVSS3: 7.5
debian
10 месяцев назад

A flaw was found in the cookie date handling logic of the libsoup HTTP ...

EPSS

Процентиль: 45%
0.00594
Низкий

7.5 High

CVSS3

Дефекты

CWE-125