Описание
A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in a heap buffer overflow.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | needs-triage | |
| esm-apps/resolute | released | 2.74.3-10.1ubuntu5+esm4 |
| esm-infra-legacy/xenial | not-affected | code not present |
| esm-infra/bionic | not-affected | code not present |
| esm-infra/focal | released | 2.70.0-1ubuntu0.5+esm5 |
| jammy | released | 2.74.2-3ubuntu0.10 |
| noble | released | 2.74.3-6ubuntu1.10 |
| resolute | needed | |
| stonking | needs-triage | |
| upstream | needed |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | needs-triage | |
| esm-apps/jammy | released | 3.0.7-0ubuntu1+esm10 |
| jammy | needed | |
| noble | released | 3.4.4-5ubuntu0.10 |
| resolute | released | 3.6.6-1ubuntu0.2 |
| stonking | released | 3.6.6-1ubuntu3.1 |
| upstream | not-affected | 3.7.3 |
Показывать по
EPSS
9.8 Critical
CVSS3
Связанные уязвимости
A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in a heap buffer overflow.
A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in a heap buffer overflow.
Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth
A flaw was found in libsoup. When the permessage-deflate WebSocket ext ...
A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in a heap buffer overflow.
EPSS
9.8 Critical
CVSS3