libsoup-devel vulnerabilities (TuxCare)
44 vulnerabilities.
libsoup-develTuxCareLibsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth8.6 Highlibsoup-develTuxCareLibsoup: libsoup: heap buffer overflow during websocket client-frame masking8.6 Highlibsoup-develTuxCareLibsoup: libsoup: heap buffer overflow during websocket receive-buffer growth8.6 Highlibsoup-develTuxCareLibsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding8.2 Highlibsoup-develTuxCareLibsoup: libsoup: heap buffer overflow during websocket message reassembly8.6 Highlibsoup-develTuxCareLibsoup: libsoup: heap buffer overflow from websocket pong signal type confusion8.6 Highlibsoup-develTuxCareUpdate of libsoupNo scorelibsoup-develTuxCareUpdate of libsoupNo scorelibsoup-develTuxCareUpdate of libsoupNo scorelibsoup-develTuxCareLibsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()5.4 Mediumlibsoup-develTuxCareLibsoup: heap out-of-bounds read in libsoup due to integer truncation4.2 Mediumlibsoup-develTuxCareLibsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation7.5 Highlibsoup-develTuxCareSoupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service7.5 Highlibsoup-develTuxCareLibsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver4.8 Mediumlibsoup-develTuxCareLibsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment5.9 Mediumlibsoup-develTuxCareLibsoup: libsoup: authentication bypass via digest authentication replay attack5.8 Mediumlibsoup-develTuxCareLibsoup: libsoup: http request smuggling via duplicate content-length headers3.7 Lowlibsoup-develTuxCareLibsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources6.5 Mediumlibsoup-develTuxCareLibsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure5.3 Mediumlibsoup-develTuxCareLibsoup: libsoup: http request smuggling via malformed chunk headers5.3 Mediumlibsoup-develTuxCareLibsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response8.6 Highlibsoup-develTuxCareLibsoup: libsoup: credential leakage via http redirects5.8 Mediumlibsoup-develTuxCareLibsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured5.8 Mediumlibsoup-develTuxCareLibsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication8.6 Highlibsoup-develTuxCareLibsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)8.2 Highlibsoup-develTuxCareLibsoup: out-of-bounds read in cookie date handling of libsoup http library7.5 Highlibsoup-develTuxCareLibsoup: integer overflow in cookie expiration date handling in libsoup3.7 Lowlibsoup-develTuxCareLibsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup7.5 Highlibsoup-develTuxCareLibsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server6.8 Mediumlibsoup-develTuxCareLibsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c6.5 Mediumlibsoup-develTuxCareUpdate of libsoupNo scorelibsoup-develTuxCareLibsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value9.0 Criticallibsoup-develTuxCareLibsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process7.4 Highlibsoup-develTuxCareLibsoup: denial of service in server when client requests a large amount of overlapping ranges with range header5.3 Mediumlibsoup-develTuxCareLibsoup: out of bounds reads in soup_headers_parse_request()7.5 Highlibsoup-develTuxCareLibsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header7.5 Highlibsoup-develTuxCareLibsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()6.5 Mediumlibsoup-develTuxCareLibsoup: heap buffer overflow in sniff_unknown()6.5 Mediumlibsoup-develTuxCareLibsoup: integer overflow in append_param_quoted5.9 Mediumlibsoup-develTuxCareLibsoup: denial of service attack to websocket server7.5 Highlibsoup-develTuxCareLibsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content7.0 Highlibsoup-develTuxCareGNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of...7.5 Highlibsoup-develTuxCareGNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to...6.5 Mediumlibsoup-develTuxCareGNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0'...7.5 High