libsoup3 vulnerabilities (Red Hat)
27 vulnerabilities.
-
libsoup3Red Hat Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth 8.6 High -
libsoup3Red Hat Libsoup: libsoup: heap buffer overflow during websocket client-frame masking 8.6 High -
libsoup3Red Hat Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth 8.6 High -
libsoup3Red Hat Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding 8.2 High -
libsoup3Red Hat Libsoup: libsoup: heap buffer overflow during websocket message reassembly 8.6 High -
libsoup3Red Hat Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion 8.6 High -
libsoup3Red Hat Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload 7.6 High -
libsoup3Red Hat Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation 7.5 High -
libsoup3Red Hat Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service 7.5 High -
libsoup3Red Hat Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment 5.9 Medium -
libsoup3Red Hat Libsoup: libsoup: denial of service via use-after-free in http/2 server 5.3 Medium -
libsoup3Red Hat Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response 8.6 High -
libsoup3Red Hat Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication 8.6 High -
libsoup3Red Hat Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins) 8.2 High -
libsoup3Red Hat Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion 7.5 High -
libsoup3Red Hat Libsoup: out-of-bounds read in cookie date handling of libsoup http library 7.5 High -
libsoup3Red Hat Libsoup: integer overflow in cookie expiration date handling in libsoup 3.7 Low -
libsoup3Red Hat Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup 7.5 High -
libsoup3Red Hat Libsoup: cookie domain validation bypass via uppercase characters in libsoup 4.3 Medium -
libsoup3Red Hat Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server 6.8 Medium -
libsoup3Red Hat Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process 7.4 High -
libsoup3Red Hat Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authentication 6.5 Medium -
libsoup3Red Hat Libsoup: denial of service on libsoup through http/2 server 7.5 High -
libsoup3Red Hat Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header 5.3 Medium -
libsoup3Red Hat Libsoup: out of bounds reads in soup_headers_parse_request() 7.5 High -
libsoup3Red Hat Libsoup: denial of service attack to websocket server 7.5 High -
libsoup3Red Hat Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content 7.0 High