CVE-2025-4945: Libsoup: integer overflow in cookie expiration date handling in libsoup
A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior, allowing an attacker to bypass cookie expiration logic, causing persistent or unintended cookie behavior. The issue stems from improper validation of large integer inputs during date arithmetic operations within the cookie parsing routines.
Other sources
Integer Overflow or Wraparound vulnerability in the cookie parsing logic of the libsoup HTTP client/server library. This issue potentially allows improper handling of cookie expiration dates due to an integer overflow when processing excessively large values. The vulnerability arises from insufficient validation in the conversion logic of cookie expiration timestamps, which can result in undefined behavior. This may enable an attacker to craft malicious cookies that never expire or behave unpredictably, impacting session management and security policies in applications relying on libsoup
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4945?
CVE-2025-4945 has been assigned a critical severity level due to its potential to cause integer overflow and lead to undefined behavior.
How do I fix CVE-2025-4945?
To fix CVE-2025-4945, update the libsoup HTTP library to the latest version that patches the integer overflow vulnerability.
Which software is affected by CVE-2025-4945?
CVE-2025-4945 primarily affects the libsoup HTTP library used in GNOME applications and other software relying on it.
What is the nature of the flaw in CVE-2025-4945?
The flaw in CVE-2025-4945 is related to the cookie parsing logic where a crafted expiration date value can trigger an integer overflow.
Can CVE-2025-4945 be exploited remotely?
Yes, CVE-2025-4945 can potentially be exploited remotely by sending specially crafted cookies to applications using libsoup.