Search CVE reports
61 – 64 of 64 results
A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP...
2 affected packages
libsoup2.4, libsoup3
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libsoup2.4 | Not affected | Fixed | Fixed | Fixed | Fixed |
| libsoup3 | Not affected | Fixed | Fixed | Not in release | — |
GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients.
2 affected packages
libsoup2.4, libsoup3
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libsoup2.4 | Fixed | Fixed | Fixed | Fixed | Fixed |
| libsoup3 | Not affected | Fixed | Fixed | Not in release | — |
GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. There is a plausible way to reach this remotely via soup_message_headers_get_content_type...
2 affected packages
libsoup2.4, libsoup3
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libsoup2.4 | Fixed | Fixed | Fixed | Fixed | Fixed |
| libsoup3 | Not affected | Fixed | Fixed | Not in release | — |
GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a...
2 affected packages
libsoup2.4, libsoup3
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libsoup2.4 | Fixed | Fixed | Fixed | Fixed | Fixed |
| libsoup3 | Not affected | Fixed | Fixed | Not in release | — |