REDHAT-BUG-2421349: High severity libsoup vulnerability
libsoup accepts duplicate Host: headers and implements a last-value-wins policy when soupmessageheadersgetone[common] is used to construct the request URI, while many proxies and routers use the first Host: header for routing. The provided PoC reliably demonstrates that a proxy honoring the first Host: can route to backend A but the libsoup server will interpret the request as for host B (last header), enabling virtual-host confusion and potential bypasses of host-based ACLs or cache poisoning.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2421349?
The severity of REDHAT-BUG-2421349 is considered to be moderate due to the potential for improper request routing.
How do I fix REDHAT-BUG-2421349?
To fix REDHAT-BUG-2421349, ensure that your application properly validates and processes Host headers to prevent unexpected behavior.
What systems are affected by REDHAT-BUG-2421349?
REDHAT-BUG-2421349 affects any systems using libsoup that do not handle duplicate Host headers properly.
What are the risks associated with REDHAT-BUG-2421349?
The risks associated with REDHAT-BUG-2421349 include potential misrouting of requests leading to exposure of sensitive data.
Is there a workaround for REDHAT-BUG-2421349?
A possible workaround for REDHAT-BUG-2421349 is to filter or sanitize Host headers before processing requests.