REDHAT-BUG-2359358: Medium severity libsoup vulnerability
Published Apr 14, 2025
·Updated
libsoup is vulnerable to an out of bounds read in soupmultipartnewfrommessage(). A malicious HTTP client may induce the libsoup server to read out of bounds.
Affected Software
1 affected component
Gnome libsoup
Event History
Apr 14, 2025
Data Sourced
via Red Hat·02:01 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2359358?
The severity of REDHAT-BUG-2359358 is considered high due to the potential for an out of bounds read.
2
How do I fix REDHAT-BUG-2359358?
To fix REDHAT-BUG-2359358, you should update libsoup to the latest version that addresses this vulnerability.
3
What systems are affected by REDHAT-BUG-2359358?
REDHAT-BUG-2359358 affects systems using the GNOME libsoup library.
4
What types of attacks can exploit REDHAT-BUG-2359358?
An attacker could exploit REDHAT-BUG-2359358 by crafting a malicious HTTP request to induce an out of bounds read.
5
Is there a workaround for REDHAT-BUG-2359358?
Currently, the recommended action for REDHAT-BUG-2359358 is to apply the security update, as there are no reliable workarounds.