REDHAT-BUG-2367175: Integer Overflow
Integer Overflow or Wraparound vulnerability in the cookie parsing logic of the libsoup HTTP client/server library. This issue potentially allows improper handling of cookie expiration dates due to an integer overflow when processing excessively large values. The vulnerability arises from insufficient validation in the conversion logic of cookie expiration timestamps, which can result in undefined behavior. This may enable an attacker to craft malicious cookies that never expire or behave unpredictably, impacting session management and security policies in applications relying on libsoup
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2367175?
The severity of REDHAT-BUG-2367175 is considered to be a medium risk due to potential improper handling of cookie expiration.
How do I fix REDHAT-BUG-2367175?
To fix REDHAT-BUG-2367175, update to the latest version of the libsoup library where the vulnerability has been addressed.
What software is affected by REDHAT-BUG-2367175?
The affected software by REDHAT-BUG-2367175 is the libsoup library used in GNOME applications.
What kind of vulnerability is REDHAT-BUG-2367175?
REDHAT-BUG-2367175 is an integer overflow or wraparound vulnerability affecting cookie parsing logic.
What are the consequences of exploiting REDHAT-BUG-2367175?
Exploiting REDHAT-BUG-2367175 may lead to improper cookie expiration handling, which could cause security issues in applications relying on the libsoup library.