Описание
A flaw was found in libsoup's SoupServer. A remote attacker could exploit a use-after-free vulnerability where the soup_server_disconnect() function frees connection objects prematurely, even if a TLS handshake is still pending. If the handshake completes after the connection object has been freed, a dangling pointer is accessed, leading to a server crash and a Denial of Service.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 2.74.3-10.1ubuntu5 |
| esm-apps/resolute | not-affected | 2.74.3-10.1ubuntu5 |
| esm-infra-legacy/xenial | not-affected | 2.52.2-1ubuntu0.3+esm5 |
| esm-infra/bionic | not-affected | 2.62.1-1ubuntu0.4+esm6 |
| esm-infra/focal | not-affected | 2.70.0-1ubuntu0.5+esm1 |
| esm-infra/xenial | ignored | end of ESM support, was needs-triage |
| jammy | not-affected | 2.74.2-3ubuntu0.6 |
| noble | not-affected | 2.74.3-6ubuntu1.6 |
| questing | not-affected | 2.74.3-10.1ubuntu4 |
| resolute | not-affected | 2.74.3-10.1ubuntu5 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | needs-triage | |
| esm-apps/jammy | needs-triage | |
| jammy | needs-triage | |
| noble | needs-triage | |
| questing | ignored | end of life, was needs-triage |
| resolute | needs-triage | |
| upstream | needs-triage |
Показывать по
6.5 Medium
CVSS3
Связанные уязвимости
A flaw was found in libsoup's SoupServer. A remote attacker could exploit a use-after-free vulnerability where the `soup_server_disconnect()` function frees connection objects prematurely, even if a TLS handshake is still pending. If the handshake completes after the connection object has been freed, a dangling pointer is accessed, leading to a server crash and a Denial of Service.
A flaw was found in libsoup's SoupServer. A remote attacker could exploit a use-after-free vulnerability where the `soup_server_disconnect()` function frees connection objects prematurely, even if a TLS handshake is still pending. If the handshake completes after the connection object has been freed, a dangling pointer is accessed, leading to a server crash and a Denial of Service.
Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake
A flaw was found in libsoup's SoupServer. A remote attacker could expl ...
A flaw was found in libsoup's SoupServer. A remote attacker could exploit a use-after-free vulnerability where the `soup_server_disconnect()` function frees connection objects prematurely, even if a TLS handshake is still pending. If the handshake completes after the connection object has been freed, a dangling pointer is accessed, leading to a server crash and a Denial of Service.
6.5 Medium
CVSS3