libsoup2 vulnerabilities (SUSE)
47 vulnerabilities.
-
libsoup2SUSE Libsoup: soupserver: http/1 request smuggling via undrained expect: 100-continue body 5.3 Medium -
libsoup2SUSE Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth 8.6 High -
libsoup2SUSE Libsoup: libsoup: heap buffer overflow during websocket client-frame masking 8.6 High -
libsoup2SUSE Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth 8.6 High -
libsoup2SUSE Libsoup: libsoup: heap buffer overflow during websocket message reassembly 8.6 High -
libsoup2SUSE Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion 8.6 High -
libsoup2SUSE Libsoup3: libsoup: quadratic cpu denial of service in http range coalescing after cve-2025-32907 fix 5.3 Medium -
libsoup2SUSE Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses 5.3 Medium -
libsoup2SUSE Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels 6.5 Medium -
libsoup2SUSE Libsoup: heap out-of-bounds read in libsoup due to integer truncation 4.2 Medium -
libsoup2SUSE Libsoup: information disclosure in libsoup via soupauthmanager proxy credential leak on proxy switch 3.4 Low -
libsoup2SUSE Libsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string 6.5 Medium -
libsoup2SUSE Libsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leak 5.9 Medium -
libsoup2SUSE Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation 7.5 High -
libsoup2SUSE Libsoup: libsoup: http request smuggling via duplicate content-length headers 3.7 Low -
libsoup2SUSE Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources 6.5 Medium -
libsoup2SUSE Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure 5.3 Medium -
libsoup2SUSE Libsoup: libsoup: http request smuggling via malformed chunk headers 5.3 Medium -
libsoup2SUSE Libsoup: soupserver: denial of service via http request smuggling 5.3 Medium -
libsoup2SUSE Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response 8.6 High -
libsoup2SUSE Libsoup: libsoup: credential leakage via http redirects 5.8 Medium -
libsoup2SUSE Libsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured 5.8 Medium -
libsoup2SUSE Libsoup: out-of-bounds read in libsoup websocket frame processing 4.8 Medium -
libsoup2SUSE Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication 8.6 High -
libsoup2SUSE Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins) 8.2 High -
libsoup2SUSE Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.c 6.5 Medium -
libsoup2SUSE Libsoup: integer overflow in cookie expiration date handling in libsoup 3.7 Low -
libsoup2SUSE Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup 7.5 High -
libsoup2SUSE Libsoup: null pointer dereference in libsoup may lead to denial of service 4.3 Medium -
libsoup2SUSE Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server 6.8 Medium -
libsoup2SUSE Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c 6.5 Medium -
libsoup2SUSE Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value 9.0 Critical -
libsoup2SUSE Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process 7.4 High -
libsoup2SUSE Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authentication 6.5 Medium -
libsoup2SUSE Libsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an unauthorized response with di… 6.5 Medium -
libsoup2SUSE Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c 5.3 Medium -
libsoup2SUSE Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header 5.3 Medium -
libsoup2SUSE Libsoup: out of bounds reads in soup_headers_parse_request() 7.5 High -
libsoup2SUSE Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header 7.5 High -
libsoup2SUSE Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() 6.5 Medium -
libsoup2SUSE Libsoup: heap buffer overflow in sniff_unknown() 6.5 Medium -
libsoup2SUSE Libsoup: integer overflow in append_param_quoted 5.9 Medium -
libsoup2SUSE Libsoup: denial of service attack to websocket server 7.5 High -
libsoup2SUSE Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content 7.0 High -
libsoup2SUSE GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of... 7.5 High -
libsoup2SUSE GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to... 6.5 Medium -
libsoup2SUSE GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0'... 7.5 High