REDHAT-BUG-2427896: Medium severity libsoup/libsoup vulnerability
An out-of-bounds read vulnerability exists in the processframe() function of libsoup’s SoupWebSocketConnection. When maxincomingpayloadsize is explicitly set to 0, improper bounds handling allows the function to read beyond the allocated buffer while processing WebSocket frames. This condition can lead to memory disclosure or application instability. Exploitation requires a non-default configuration and a remote attacker capable of sending crafted WebSocket frames.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2427896?
The severity of REDHAT-BUG-2427896 is medium, rated at 4 out of 10.
How do I fix REDHAT-BUG-2427896?
To fix REDHAT-BUG-2427896, ensure that the max_incoming_payload_size parameter is set correctly, avoiding a value of 0.
What software is affected by REDHAT-BUG-2427896?
The vulnerable software is libsoup, specifically the libsoup library.
What type of vulnerability is REDHAT-BUG-2427896?
REDHAT-BUG-2427896 is classified as an out-of-bounds read vulnerability.
What function is responsible for the vulnerability in REDHAT-BUG-2427896?
The process_frame() function of libsoup’s SoupWebSocketConnection is responsible for the vulnerability.