libsoup vulnerabilities (Red Hat)
47 vulnerabilities.
-
libsoupRed Hat Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth 8.6 High -
libsoupRed Hat Libsoup: libsoup: heap buffer overflow during websocket client-frame masking 8.6 High -
libsoupRed Hat Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth 8.6 High -
libsoupRed Hat Libsoup: libsoup: heap buffer overflow during websocket message reassembly 8.6 High -
libsoupRed Hat Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion 8.6 High -
libsoupRed Hat Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation 7.5 High -
libsoupRed Hat Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service 7.5 High -
libsoupRed Hat Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment 5.9 Medium -
libsoupRed Hat Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response 8.6 High -
libsoupRed Hat Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication 8.6 High -
libsoupRed Hat Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins) 8.2 High -
libsoupRed Hat Libsoup: out-of-bounds read in cookie date handling of libsoup http library 7.5 High -
libsoupRed Hat Libsoup: integer overflow in cookie expiration date handling in libsoup 3.7 Low -
libsoupRed Hat Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup 7.5 High -
libsoupRed Hat Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server 6.8 Medium -
libsoupRed Hat Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c 6.5 Medium -
libsoupRed Hat Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value 9.0 Critical -
libsoupRed Hat Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process 7.4 High -
libsoupRed Hat Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header 5.3 Medium -
libsoupRed Hat Libsoup: out of bounds reads in soup_headers_parse_request() 7.5 High -
libsoupRed Hat Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header 7.5 High -
libsoupRed Hat Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() 6.5 Medium -
libsoupRed Hat Libsoup: heap buffer overflow in sniff_unknown() 6.5 Medium -
libsoupRed Hat Libsoup: integer overflow in append_param_quoted 5.9 Medium -
libsoupRed Hat Libsoup: denial of service attack to websocket server 7.5 High -
libsoupRed Hat Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content 7.0 High -
libsoupRed Hat GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of... 7.5 High -
libsoupRed Hat GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to... 6.5 Medium -
libsoupRed Hat GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0'... 7.5 High -
libsoupRed Hat FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because... 6.5 Medium -
libsoupRed Hat FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c. 8.8 High -
libsoupRed Hat Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory... 6.5 Medium -
libsoupRed Hat Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an... 6.5 Medium -
libsoupRed Hat The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have... 9.8 Critical -
libsoupRed Hat An issue was discovered in certain Apple products. iOS before 11.4 is affected. iOS before 11.3.1... 8.8 High -
libsoupRed Hat WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of... 6.5 Medium -
libsoupRed Hat WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of... 7.5 High -
libsoupRed Hat The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote... 5.5 Medium -
libsoupRed Hat An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before... 8.8 High -
libsoupRed Hat There is a stack-based buffer over-read in calling GLib in the function... 6.5 Medium -
libsoupRed Hat There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an... 6.5 Medium -
libsoupRed Hat There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in... 6.5 Medium -
libsoupRed Hat An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11... 8.8 High -
libsoupRed Hat An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment... 8.8 High -
libsoupRed Hat An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A... 9.8 Critical -
libsoupRed Hat Directory traversal vulnerability in soup-uri.c in SoupServer in libsoup before 2.35.4 allows... 5.0 Medium -
libsoupRed Hat Integer overflow in the soup_base64_encode function in soup-misc.c in libsoup 2.x.x before 2.2.x,... 7.5 High