Логотип exploitDog
bind:"GHSA-qgq4-89p9-qfrh" OR bind:"CVE-2025-4476"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-qgq4-89p9-qfrh" OR bind:"CVE-2025-4476"

Количество 9

Количество 9

github логотип

GHSA-qgq4-89p9-qfrh

6 месяцев назад

A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives a 401 (Unauthorized) HTTP response containing a specifically crafted domain parameter within the WWW-Authenticate header. Processing this malformed header can lead to a crash of the client application using libsoup. An attacker could exploit this by setting up a malicious HTTP server. If a user's application using the vulnerable libsoup library connects to this malicious server, it could result in a denial-of-service. Successful exploitation requires tricking a user's client application into connecting to the attacker's malicious server.

CVSS3: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2025-4476

6 месяцев назад

A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives a 401 (Unauthorized) HTTP response containing a specifically crafted domain parameter within the WWW-Authenticate header. Processing this malformed header can lead to a crash of the client application using libsoup. An attacker could exploit this by setting up a malicious HTTP server. If a user's application using the vulnerable libsoup library connects to this malicious server, it could result in a denial-of-service. Successful exploitation requires tricking a user's client application into connecting to the attacker's malicious server.

CVSS3: 4.3
EPSS: Низкий
redhat логотип

CVE-2025-4476

6 месяцев назад

A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives a 401 (Unauthorized) HTTP response containing a specifically crafted domain parameter within the WWW-Authenticate header. Processing this malformed header can lead to a crash of the client application using libsoup. An attacker could exploit this by setting up a malicious HTTP server. If a user's application using the vulnerable libsoup library connects to this malicious server, it could result in a denial-of-service. Successful exploitation requires tricking a user's client application into connecting to the attacker's malicious server.

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2025-4476

6 месяцев назад

A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives a 401 (Unauthorized) HTTP response containing a specifically crafted domain parameter within the WWW-Authenticate header. Processing this malformed header can lead to a crash of the client application using libsoup. An attacker could exploit this by setting up a malicious HTTP server. If a user's application using the vulnerable libsoup library connects to this malicious server, it could result in a denial-of-service. Successful exploitation requires tricking a user's client application into connecting to the attacker's malicious server.

CVSS3: 4.3
EPSS: Низкий
msrc логотип

CVE-2025-4476

4 месяца назад

Libsoup: null pointer dereference in libsoup may lead to denial of service

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2025-4476

6 месяцев назад

A denial-of-service vulnerability has been identified in the libsoup H ...

CVSS3: 4.3
EPSS: Низкий
fstec логотип

BDU:2025-10928

6 месяцев назад

Уязвимость библиотеки libsoup графического интерфейса GNOME, связанная с ошибками разыменования указателей, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.3
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:01817-1

5 месяцев назад

Security update for libsoup

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:01812-1

5 месяцев назад

Security update for libsoup

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-qgq4-89p9-qfrh

A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives a 401 (Unauthorized) HTTP response containing a specifically crafted domain parameter within the WWW-Authenticate header. Processing this malformed header can lead to a crash of the client application using libsoup. An attacker could exploit this by setting up a malicious HTTP server. If a user's application using the vulnerable libsoup library connects to this malicious server, it could result in a denial-of-service. Successful exploitation requires tricking a user's client application into connecting to the attacker's malicious server.

CVSS3: 4.3
0%
Низкий
6 месяцев назад
ubuntu логотип
CVE-2025-4476

A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives a 401 (Unauthorized) HTTP response containing a specifically crafted domain parameter within the WWW-Authenticate header. Processing this malformed header can lead to a crash of the client application using libsoup. An attacker could exploit this by setting up a malicious HTTP server. If a user's application using the vulnerable libsoup library connects to this malicious server, it could result in a denial-of-service. Successful exploitation requires tricking a user's client application into connecting to the attacker's malicious server.

CVSS3: 4.3
0%
Низкий
6 месяцев назад
redhat логотип
CVE-2025-4476

A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives a 401 (Unauthorized) HTTP response containing a specifically crafted domain parameter within the WWW-Authenticate header. Processing this malformed header can lead to a crash of the client application using libsoup. An attacker could exploit this by setting up a malicious HTTP server. If a user's application using the vulnerable libsoup library connects to this malicious server, it could result in a denial-of-service. Successful exploitation requires tricking a user's client application into connecting to the attacker's malicious server.

CVSS3: 4.3
0%
Низкий
6 месяцев назад
nvd логотип
CVE-2025-4476

A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives a 401 (Unauthorized) HTTP response containing a specifically crafted domain parameter within the WWW-Authenticate header. Processing this malformed header can lead to a crash of the client application using libsoup. An attacker could exploit this by setting up a malicious HTTP server. If a user's application using the vulnerable libsoup library connects to this malicious server, it could result in a denial-of-service. Successful exploitation requires tricking a user's client application into connecting to the attacker's malicious server.

CVSS3: 4.3
0%
Низкий
6 месяцев назад
msrc логотип
CVE-2025-4476

Libsoup: null pointer dereference in libsoup may lead to denial of service

CVSS3: 4.3
0%
Низкий
4 месяца назад
debian логотип
CVE-2025-4476

A denial-of-service vulnerability has been identified in the libsoup H ...

CVSS3: 4.3
0%
Низкий
6 месяцев назад
fstec логотип
BDU:2025-10928

Уязвимость библиотеки libsoup графического интерфейса GNOME, связанная с ошибками разыменования указателей, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.3
0%
Низкий
6 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:01817-1

Security update for libsoup

5 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:01812-1

Security update for libsoup

5 месяцев назад

Уязвимостей на страницу