Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-2784

Опубликовано: 03 апр. 2025
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7

Описание

A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.

РелизСтатусПримечание
devel

not-affected

2.74.3-10
esm-infra/bionic

released

2.62.1-1ubuntu0.4+esm5
esm-infra/focal

not-affected

2.70.0-1ubuntu0.2
esm-infra/xenial

released

2.52.2-1ubuntu0.3+esm4
focal

released

2.70.0-1ubuntu0.2
jammy

released

2.74.2-3ubuntu0.2
noble

released

2.74.3-6ubuntu1.2
oracular

released

2.74.3-7ubuntu0.2
plucky

not-affected

2.74.3-10
upstream

released

2.74.3-10

Показывать по

РелизСтатусПримечание
devel

not-affected

3.6.5-1
esm-apps/jammy

released

3.0.7-0ubuntu1+esm2
esm-infra/focal

DNE

focal

DNE

jammy

needed

noble

released

3.4.4-5ubuntu0.2
oracular

released

3.6.0-2ubuntu0.2
plucky

not-affected

3.6.5-1
upstream

released

3.6.5-1

Показывать по

EPSS

Процентиль: 76%
0.01032
Низкий

7 High

CVSS3

Связанные уязвимости

CVSS3: 7
redhat
3 месяца назад

A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.

CVSS3: 7
nvd
3 месяца назад

A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.

CVSS3: 7
msrc
около 1 месяца назад

Описание отсутствует

CVSS3: 7
debian
3 месяца назад

A flaw was found in libsoup. The package is vulnerable to a heap buffe ...

CVSS3: 7
github
3 месяца назад

A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.

EPSS

Процентиль: 76%
0.01032
Низкий

7 High

CVSS3