Описание
A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.
Отчет
A moderate severity heap buffer over-read flaw was found in the libsoup content sniffer, in the sniff_unknown() function of soup-content-sniffer.c. A remote attacker who controls an HTTP server can send a crafted HTTP response to a client application using libsoup, causing the content sniffer to read beyond the bounds of a heap-allocated buffer when determining the content type. This out-of-bounds read can lead to disclosure of information from process memory or cause the client application to crash, consistent with the Red Hat severity rating of Moderate (CVSS 6.5, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L), which matches the upstream rating. Red Hat Enterprise Linux 8 and 9 (libsoup), Red Hat In-Vehicle OS (libsoup), and products shipping the mingw-libsoup variant are affected, and a fix is being pursued through the respective product streams. Red Hat Enterprise Linux 10 is not affected because the vulnerable code is not present in its libsoup3 packages.
Меры по смягчению последствий
No mitigation is currently available for this vulnerability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | libsoup3 | Not affected | ||
| Red Hat Enterprise Linux 6 | libsoup | Out of support scope | ||
| Red Hat Enterprise Linux 7 | libsoup | Out of support scope | ||
| Red Hat Enterprise Linux 8 | libsoup | Fixed | RHSA-2025:4560 | 06.05.2025 |
| Red Hat Enterprise Linux 8 | mingw-freetype | Fixed | RHSA-2025:8292 | 29.05.2025 |
| Red Hat Enterprise Linux 8 | spice-client-win | Fixed | RHSA-2025:8292 | 29.05.2025 |
| Red Hat Enterprise Linux 8 | libsoup | Fixed | RHSA-2025:4560 | 06.05.2025 |
| Red Hat Enterprise Linux 8.8 Extended Update Support | libsoup | Fixed | RHSA-2025:4568 | 06.05.2025 |
| Red Hat Enterprise Linux 9 | libsoup | Fixed | RHSA-2025:7436 | 13.05.2025 |
| Red Hat Enterprise Linux 9.2 Extended Update Support | libsoup | Fixed | RHSA-2025:4508 | 06.05.2025 |
Показывать по
Дополнительная информация
Статус:
EPSS
6.5 Medium
CVSS3
Связанные уязвимости
A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.
A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.
A flaw was found in libsoup. A vulnerability in the sniff_unknown() fu ...
A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.
EPSS
6.5 Medium
CVSS3