Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-102560

Опубликовано: 29 сент. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 9.8

Описание

A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in a heap buffer overflow.

РелизСтатусПримечание
devel

needs-triage

esm-apps/resolute

released

2.74.3-10.1ubuntu5+esm4
esm-infra-legacy/xenial

not-affected

code not present
esm-infra/bionic

not-affected

code not present
esm-infra/focal

released

2.70.0-1ubuntu0.5+esm5
jammy

released

2.74.2-3ubuntu0.10
noble

released

2.74.3-6ubuntu1.10
resolute

needed

stonking

needs-triage

upstream

needed

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-apps/jammy

released

3.0.7-0ubuntu1+esm10
jammy

needed

noble

released

3.4.4-5ubuntu0.10
resolute

released

3.6.6-1ubuntu0.2
stonking

released

3.6.6-1ubuntu3.1
upstream

not-affected

3.7.3

Показывать по

EPSS

Процентиль: 44%
0.00521
Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 8.6
redhat
2 месяца назад

A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in a heap buffer overflow.

CVSS3: 9.8
nvd
около 1 месяца назад

A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in a heap buffer overflow.

CVSS3: 8.6
msrc
около 1 месяца назад

Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth

CVSS3: 9.8
debian
около 1 месяца назад

A flaw was found in libsoup. When the permessage-deflate WebSocket ext ...

CVSS3: 8.6
github
около 1 месяца назад

A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in a heap buffer overflow.

EPSS

Процентиль: 44%
0.00521
Низкий

9.8 Critical

CVSS3