Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hg24-p7xv-jhq8

Опубликовано: 13 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component.

A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component.

EPSS

Процентиль: 12%
0.0004
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 1 месяца назад

A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component.

CVSS3: 5.3
redhat
около 1 месяца назад

A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component.

CVSS3: 5.3
nvd
около 1 месяца назад

A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component.

CVSS3: 5.3
msrc
около 1 месяца назад

Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure

CVSS3: 5.3
debian
около 1 месяца назад

A flaw was identified in libsoup, a widely used HTTP library in GNOME- ...

EPSS

Процентиль: 12%
0.0004
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-125