REDHAT-BUG-1597980: Medium severity libsoup vulnerability
Published Jul 4, 2018
·Updated
libsoup through version 2.63.2 is vulnerable to a crash in the soupcookiejar.c:getcookies() when handling empty hostnames.
Upstream Patch:
https://gitlab.gnome.org/GNOME/libsoup/commit/db2b0d5809d5f8226d47312b40992cadbcde439f
Affected Software
1 affected component
Gnome libsoup<=2.63.2
Event History
Jul 4, 2018
Data Sourced
via Red Hat·05:28 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-1597980?
The severity of REDHAT-BUG-1597980 is categorized as a crash vulnerability due to improper handling of empty hostnames.
2
How do I fix REDHAT-BUG-1597980?
To fix REDHAT-BUG-1597980, upgrade libsoup to version 2.64.0 or later where the vulnerability has been patched.
3
What versions are affected by REDHAT-BUG-1597980?
Versions of libsoup up to and including 2.63.2 are affected by REDHAT-BUG-1597980.
4
What kind of vulnerability is REDHAT-BUG-1597980?
REDHAT-BUG-1597980 is a denial-of-service vulnerability that can cause a crash.
5
Is there a known exploit for REDHAT-BUG-1597980?
As of now, there is no publicly known exploit specifically targeting REDHAT-BUG-1597980.