REDHAT-BUG-2367183: High severity libsoup vulnerability
Integer Underflow (Wraparound) vulnerability in the multipart message parser of the libsoup HTTP library. The flaw is caused by an unsafe arithmetic operation in the soupmultipartnewfrommessage() function. When a specially crafted multipart message is processed, the length calculation (end - 2 - split) can underflow, leading to invalid memory access and application crash. This can be exploited remotely without any authentication or user interaction, allowing attackers to disrupt the availability of applications or services using libsoup.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2367183?
The severity of REDHAT-BUG-2367183 is classified as high due to the potential for exploitation through crafted multipart messages.
How do I fix REDHAT-BUG-2367183?
To fix REDHAT-BUG-2367183, upgrade to the latest version of the libsoup HTTP library where the vulnerability has been addressed.
What systems are affected by REDHAT-BUG-2367183?
Systems using the libsoup HTTP library are affected by REDHAT-BUG-2367183, particularly those that handle multipart message parsing.
What can happen if REDHAT-BUG-2367183 is exploited?
If exploited, REDHAT-BUG-2367183 can lead to application crashes or potentially allow for arbitrary code execution.
Is there a workaround for REDHAT-BUG-2367183?
A specific workaround for REDHAT-BUG-2367183 is not recommended; updating the libsoup library is the best solution.