Описание
A flaw was found in libsoup. A vulnerability in sniff_feed_or_html() and skip_insignificant_space() functions may lead to a heap buffer over-read.
Отчет
A moderate severity vulnerability was found in libsoup, where heap buffer over-reads can occur in the content sniffer's sniff_feed_or_html() and skip_insignificant_space() functions. A remote attacker who controls an HTTP server that a libsoup-based client connects to could send a crafted HTTP response that causes the client to read out of bounds, potentially resulting in a crash or exposure of out-of-bounds heap memory contents. Red Hat has rated this flaw Moderate severity with a CVSS 3.1 score of 6.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L), consistent with the upstream assessment. The libsoup package as shipped in Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Red Hat In-Vehicle OS is affected, and fixes are being pursued through the respective product maintenance streams. Red Hat Enterprise Linux 10, which ships the libsoup3 package, is not affected because the vulnerable code is not present in that version.
Меры по смягчению последствий
No mitigation is currently available for this vulnerability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | libsoup3 | Not affected | ||
| Red Hat Enterprise Linux 6 | libsoup | Out of support scope | ||
| Red Hat Enterprise Linux 7 | libsoup | Out of support scope | ||
| Red Hat Enterprise Linux 8 | libsoup | Fixed | RHSA-2025:4560 | 06.05.2025 |
| Red Hat Enterprise Linux 8 | mingw-freetype | Fixed | RHSA-2025:8292 | 29.05.2025 |
| Red Hat Enterprise Linux 8 | spice-client-win | Fixed | RHSA-2025:8292 | 29.05.2025 |
| Red Hat Enterprise Linux 8 | libsoup | Fixed | RHSA-2025:4560 | 06.05.2025 |
| Red Hat Enterprise Linux 8.8 Extended Update Support | libsoup | Fixed | RHSA-2025:4568 | 06.05.2025 |
| Red Hat Enterprise Linux 9 | libsoup | Fixed | RHSA-2025:7436 | 13.05.2025 |
| Red Hat Enterprise Linux 9.2 Extended Update Support | libsoup | Fixed | RHSA-2025:4508 | 06.05.2025 |
Показывать по
Дополнительная информация
Статус:
EPSS
6.5 Medium
CVSS3
Связанные уязвимости
A flaw was found in libsoup. A vulnerability in sniff_feed_or_html() and skip_insignificant_space() functions may lead to a heap buffer over-read.
A flaw was found in libsoup. A vulnerability in sniff_feed_or_html() and skip_insignificant_space() functions may lead to a heap buffer over-read.
Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()
A flaw was found in libsoup. A vulnerability in sniff_feed_or_html() a ...
A flaw was found in libsoup. A vulnerability in sniff_feed_or_html() and skip_insignificant_space() functions may lead to a heap buffer over-read.
EPSS
6.5 Medium
CVSS3