libsoup3 vulnerabilities (Debian)
71 vulnerabilities.
libsoup3DebianLibsoup: cookie domain validation bypass via uppercase characters in libsoup4.3 Mediumlibsoup3DebianLibsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server6.8 Mediumlibsoup3DebianLibsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c6.5 Mediumlibsoup3DebianLibsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value9.0 Criticallibsoup3DebianLibsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process7.4 Highlibsoup3DebianLibsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authentication6.5 Mediumlibsoup3DebianLibsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an unauthorized response with di…6.5 Mediumlibsoup3DebianLibsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c5.3 Mediumlibsoup3DebianLibsoup: denial of service on libsoup through http/2 server7.5 Highlibsoup3DebianLibsoup: denial of service in server when client requests a large amount of overlapping ranges with range header5.3 Mediumlibsoup3DebianLibsoup: out of bounds reads in soup_headers_parse_request()7.5 Highlibsoup3DebianLibsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header7.5 Highlibsoup3DebianLibsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()6.5 Mediumlibsoup3DebianLibsoup: heap buffer overflow in sniff_unknown()6.5 Mediumlibsoup3DebianLibsoup: segmentation fault when parsing malformed data uri5.9 Mediumlibsoup3DebianLibsoup: integer overflow in append_param_quoted5.9 Mediumlibsoup3DebianLibsoup: denial of service attack to websocket server7.5 Highlibsoup3DebianLibsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content7.0 Highlibsoup3DebianGNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of...7.5 Highlibsoup3DebianGNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to...6.5 Mediumlibsoup3DebianGNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0'...7.5 High