rootio-libsoup2.4 vulnerabilities (Root)
15 vulnerabilities.
-
rootio-libsoup2.4Root Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation 7.5 High -
rootio-libsoup2.4Root Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service 7.5 High -
rootio-libsoup2.4Root Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment 5.9 Medium -
rootio-libsoup2.4Root Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake 6.5 Medium -
rootio-libsoup2.4Root Libsoup: libsoup: authentication bypass via digest authentication replay attack 5.8 Medium -
rootio-libsoup2.4Root Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources 6.5 Medium -
rootio-libsoup2.4Root Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response 8.6 High -
rootio-libsoup2.4Root Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication 8.6 High -
rootio-libsoup2.4Root Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins) 8.2 High -
rootio-libsoup2.4Root Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup 7.5 High -
rootio-libsoup2.4Root Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value 9.0 Critical -
rootio-libsoup2.4Root Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process 7.4 High -
rootio-libsoup2.4Root Libsoup: out of bounds reads in soup_headers_parse_request() 7.5 High -
rootio-libsoup2.4Root Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header 7.5 High -
rootio-libsoup2.4Root Libsoup: denial of service attack to websocket server 7.5 High