Описание
A flaw was found in libsoup, where the soup_multipart_new_from_message() function is vulnerable to an out-of-bounds read. This flaw allows a malicious HTTP client to induce the libsoup server to read out of bounds.
Меры по смягчению последствий
Currently, no mitigation is available for this vulnerability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | libsoup | Out of support scope | ||
| Red Hat Enterprise Linux 7 | libsoup | Affected | ||
| Red Hat Enterprise Linux 10 | libsoup3 | Fixed | RHSA-2025:7505 | 13.05.2025 |
| Red Hat Enterprise Linux 8 | libsoup | Fixed | RHSA-2025:8132 | 26.05.2025 |
| Red Hat Enterprise Linux 8 | libsoup | Fixed | RHSA-2025:8132 | 26.05.2025 |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | libsoup | Fixed | RHSA-2025:8480 | 04.06.2025 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | libsoup | Fixed | RHSA-2025:8663 | 09.06.2025 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | libsoup | Fixed | RHSA-2025:8482 | 04.06.2025 |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service | libsoup | Fixed | RHSA-2025:8482 | 04.06.2025 |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | libsoup | Fixed | RHSA-2025:8482 | 04.06.2025 |
Показывать по
Дополнительная информация
Статус:
EPSS
7.4 High
CVSS3
Связанные уязвимости
A flaw was found in libsoup, where the soup_multipart_new_from_message() function is vulnerable to an out-of-bounds read. This flaw allows a malicious HTTP client to induce the libsoup server to read out of bounds.
A flaw was found in libsoup, where the soup_multipart_new_from_message() function is vulnerable to an out-of-bounds read. This flaw allows a malicious HTTP client to induce the libsoup server to read out of bounds.
A flaw was found in libsoup, where the soup_multipart_new_from_message ...
A flaw was found in libsoup, where the soup_multipart_new_from_message() function is vulnerable to an out-of-bounds read. This flaw allows a malicious HTTP client to induce the libsoup server to read out of bounds.
EPSS
7.4 High
CVSS3