REDHAT-BUG-2357066: Medium severity libsoup vulnerability
libsoup's SoupWebsocketConnection limits the size of incoming packets but not the size of WebSocket messages. A malicious peer may cause libsoup to allocate large amounts of memory by sending large messages consisting of many smaller packets.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2357066?
The severity of REDHAT-BUG-2357066 is considered high due to the potential for a denial-of-service attack.
How do I fix REDHAT-BUG-2357066?
To fix REDHAT-BUG-2357066, update libsoup to the latest version that includes the security patch addressing the message size limit.
What are the risks associated with REDHAT-BUG-2357066?
The risks associated with REDHAT-BUG-2357066 include the possibility of memory exhaustion and application instability from large message processing.
Which software is affected by REDHAT-BUG-2357066?
The software affected by REDHAT-BUG-2357066 is GNOME libsoup.
Can I exploit REDHAT-BUG-2357066 for an attack?
Yes, a malicious peer can exploit REDHAT-BUG-2357066 to send large WebSocket messages, leading to potential memory allocation issues.