Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-32907

Опубликовано: 14 апр. 2025
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

A flaw was found in libsoup. The implementation of HTTP range requests is vulnerable to a resource consumption attack. This flaw allows a malicious client to request the same range many times in a single HTTP request, causing the server to use large amounts of memory. This does not allow for a full denial of service.

EPSS

Процентиль: 32%
0.00117
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-1050

Связанные уязвимости

CVSS3: 5.3
ubuntu
2 месяца назад

A flaw was found in libsoup. The implementation of HTTP range requests is vulnerable to a resource consumption attack. This flaw allows a malicious client to request the same range many times in a single HTTP request, causing the server to use large amounts of memory. This does not allow for a full denial of service.

CVSS3: 5.3
redhat
2 месяца назад

A flaw was found in libsoup. The implementation of HTTP range requests is vulnerable to a resource consumption attack. This flaw allows a malicious client to request the same range many times in a single HTTP request, causing the server to use large amounts of memory. This does not allow for a full denial of service.

CVSS3: 5.3
debian
2 месяца назад

A flaw was found in libsoup. The implementation of HTTP range requests ...

CVSS3: 7.5
github
2 месяца назад

A flaw was found in libsoup. The implementation of HTTP range requests is vulnerable to a resource consumption attack. This flaw allows a malicious client to request the same range many times in a single HTTP request, causing the server to use large amounts of memory.

CVSS3: 7.5
fstec
7 месяцев назад

Уязвимость библиотеки libsoup графического интерфейса GNOME, связанная с асимметричным потреблением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 32%
0.00117
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-1050