Описание
A flaw was found in libsoup. It is vulnerable to memory leaks in the soup_header_parse_quality_list() function when parsing a quality list that contains elements with all zeroes.
Отчет
A moderate impact memory leak flaw was found in libsoup. When the soup_header_parse_quality_list() function in soup-headers.c parses a quality list in which any element's quality value consists entirely of zeroes (for example q=0, q=0.0, or q=0.000), the parsed elements are not freed and memory is leaked in proportion to the size of the crafted values, which may carry a large number of trailing zeroes. A remote attacker able to have an application using libsoup parse such crafted HTTP quality-list headers could trigger this leak repeatedly, eventually exhausting available memory and causing a denial of service. The affected libsoup packages ship in Red Hat Enterprise Linux 8 and Red Hat Enterprise Linux 9, where fixes have been delivered through the respective update streams, and in Red Hat In-Vehicle OS, where the fix is being pursued through the platform's update process. Red Hat Enterprise Linux 10 ships libsoup3, which does not contain the vulnerable code and is therefore not affected. The Red Hat severity rating (Moderate, CVSS 6.5) is consistent with the upstream rating.
Меры по смягчению последствий
Currently, no mitigation is available for this vulnerability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | libsoup3 | Not affected | ||
| Red Hat Enterprise Linux 6 | libsoup | Out of support scope | ||
| Red Hat Enterprise Linux 7 | libsoup | Out of support scope | ||
| Red Hat Enterprise Linux 8 | libsoup | Fixed | RHSA-2025:4560 | 06.05.2025 |
| Red Hat Enterprise Linux 8 | libsoup | Fixed | RHSA-2025:4560 | 06.05.2025 |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | libsoup | Fixed | RHSA-2025:4538 | 06.05.2025 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | libsoup | Fixed | RHSA-2025:4609 | 07.05.2025 |
| Red Hat Enterprise Linux 8.4 Telecommunications Update Service | libsoup | Fixed | RHSA-2025:4609 | 07.05.2025 |
| Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | libsoup | Fixed | RHSA-2025:4609 | 07.05.2025 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | libsoup | Fixed | RHSA-2025:4624 | 07.05.2025 |
Показывать по
Дополнительная информация
Статус:
EPSS
6.5 Medium
CVSS3
Связанные уязвимости
A flaw was found in libsoup. It is vulnerable to memory leaks in the soup_header_parse_quality_list() function when parsing a quality list that contains elements with all zeroes.
A flaw was found in libsoup. It is vulnerable to memory leaks in the soup_header_parse_quality_list() function when parsing a quality list that contains elements with all zeroes.
Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c
A flaw was found in libsoup. It is vulnerable to memory leaks in the s ...
A flaw was found in libsoup. It is vulnerable to memory leaks in the soup_header_parse_quality_list() function when parsing a quality list that contains elements with all zeroes.
EPSS
6.5 Medium
CVSS3