libsoup3 vulnerabilities (Debian)
71 vulnerabilities.
-
libsoup3Debian Libsoup: soupserver: http/1 request smuggling via undrained expect: 100-continue body 5.3 Medium -
libsoup3Debian Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth 8.6 High -
libsoup3Debian Libsoup: libsoup: heap buffer overflow during websocket client-frame masking 8.6 High -
libsoup3Debian Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth 8.6 High -
libsoup3Debian Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding 8.2 High -
libsoup3Debian Libsoup: libsoup: heap buffer overflow during websocket message reassembly 8.6 High -
libsoup3Debian Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion 8.6 High -
libsoup3Debian Libsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body read 5.9 Medium -
libsoup3Debian Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload 7.6 High -
libsoup3Debian Libsoup3: libsoup: quadratic cpu denial of service in http range coalescing after cve-2025-32907 fix 5.3 Medium -
libsoup3Debian Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses 5.3 Medium -
libsoup3Debian Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked() 5.4 Medium -
libsoup3Debian Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until() 6.5 Medium -
libsoup3Debian Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels 6.5 Medium -
libsoup3Debian Libsoup: heap out-of-bounds read in libsoup due to integer truncation 4.2 Medium -
libsoup3Debian Libsoup: information disclosure in libsoup via soupauthmanager proxy credential leak on proxy switch 3.4 Low -
libsoup3Debian Libsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string 6.5 Medium -
libsoup3Debian Libsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leak 5.9 Medium -
libsoup3Debian Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation 7.5 High -
libsoup3Debian Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service 7.5 High -
libsoup3Debian Soupclientmessageiohttp2: libsoup3: libsoup: http/2 goaway frame parsing heap buffer over-read via invalid nul-termination assumption 5.9 Medium -
libsoup3Debian Libsoup: incomplete fix for cve-2026-0716: out-of-bounds read in libsoup websocket frame processing (unmasked path) 4.8 Medium -
libsoup3Debian Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver 4.8 Medium -
libsoup3Debian Libsoup: libsoup: http request smuggling via unsigned to signed conversion error 4.8 Medium -
libsoup3Debian Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment 5.9 Medium -
libsoup3Debian Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake 6.5 Medium -
libsoup3Debian Libsoup: libsoup: denial of service via use-after-free in http/2 server 5.3 Medium -
libsoup3Debian Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header 3.9 Low -
libsoup3Debian Libsoup: libsoup: header and http request injection via crlf injection 3.9 Low -
libsoup3Debian Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames 3.9 Low -
libsoup3Debian Libsoup: libsoup: authentication bypass via digest authentication replay attack 5.8 Medium -
libsoup3Debian Libsoup: libsoup: http request smuggling via duplicate content-length headers 3.7 Low -
libsoup3Debian Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources 6.5 Medium -
libsoup3Debian Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure 5.3 Medium -
libsoup3Debian Libsoup: libsoup: http request smuggling via malformed chunk headers 5.3 Medium -
libsoup3Debian Libsoup: soupserver: denial of service via http request smuggling 5.3 Medium -
libsoup3Debian Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response 8.6 High -
libsoup3Debian Libsoup: libsoup: credential leakage via http redirects 5.8 Medium -
libsoup3Debian Libsoup: libsoup: http header injection or response splitting via crlf injection in content-disposition header 5.8 Medium -
libsoup3Debian Libsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured 5.8 Medium -
libsoup3Debian Libsoup: out-of-bounds read in libsoup websocket frame processing 4.8 Medium -
libsoup3Debian Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication 8.6 High -
libsoup3Debian Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins) 8.2 High -
libsoup3Debian Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion 7.5 High -
libsoup3Debian Libsoup: out-of-bounds read in cookie date handling of libsoup http library 7.5 High -
libsoup3Debian Libsoup: improper handling of http vary header in libsoup caching 5.9 Medium -
libsoup3Debian Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.c 6.5 Medium -
libsoup3Debian Libsoup: integer overflow in cookie expiration date handling in libsoup 3.7 Low -
libsoup3Debian Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup 7.5 High -
libsoup3Debian Libsoup: null pointer dereference in libsoup may lead to denial of service 4.3 Medium - Show olderLoading…