Описание
A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap buffer overflow.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | needs-triage | |
| esm-apps/resolute | released | 2.74.3-10.1ubuntu5+esm4 |
| esm-infra-legacy/xenial | released | 2.52.2-1ubuntu0.3+esm9 |
| esm-infra/bionic | released | 2.62.1-1ubuntu0.4+esm10 |
| esm-infra/focal | released | 2.70.0-1ubuntu0.5+esm5 |
| jammy | released | 2.74.2-3ubuntu0.10 |
| noble | released | 2.74.3-6ubuntu1.10 |
| resolute | needed | |
| stonking | needs-triage | |
| upstream | needed |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | needs-triage | |
| esm-apps/jammy | released | 3.0.7-0ubuntu1+esm10 |
| jammy | needed | |
| noble | released | 3.4.4-5ubuntu0.10 |
| resolute | released | 3.6.6-1ubuntu0.2 |
| stonking | released | 3.6.6-1ubuntu3.1 |
| upstream | not-affected | 3.7.3 |
Показывать по
EPSS
8.6 High
CVSS3
Связанные уязвимости
A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap buffer overflow.
A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap buffer overflow.
Libsoup: libsoup: heap buffer overflow during websocket client-frame masking
A flaw was found in libsoup. When constructing a masked WebSocket clie ...
A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap buffer overflow.
EPSS
8.6 High
CVSS3