REDHAT-BUG-2359353: Null Pointer Dereference
Published Apr 14, 2025
·Updated
libsoup's SoupContentSniffer, prior to version 3.6.2, is vulnerable to a null pointer dereference in its sniffmp4 function. A malicious HTTP server may cause the libsoup client to crash.
Affected Software
1 affected component
Gnome libsoup<3.6.2
Event History
Apr 14, 2025
Data Sourced
via Red Hat·02:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2359353?
The severity of REDHAT-BUG-2359353 is considered high due to the potential for a crash caused by a malicious HTTP server.
2
How do I fix REDHAT-BUG-2359353?
To fix REDHAT-BUG-2359353, update libsoup to version 3.6.2 or later.
3
What versions of libsoup are affected by REDHAT-BUG-2359353?
Versions of libsoup prior to 3.6.2 are affected by REDHAT-BUG-2359353.
4
What kind of attack does REDHAT-BUG-2359353 involve?
REDHAT-BUG-2359353 involves a denial-of-service attack where a malicious HTTP server can cause the libsoup client to crash.
5
Is there a workaround for REDHAT-BUG-2359353?
There are no specific workarounds for REDHAT-BUG-2359353; the best approach is to update to the patched version.