REDHAT-BUG-2439671: Low severity libsoup vulnerability
Out-of-bounds read vulnerability in the handlepartialget() function of libsoup when processing HTTP Range headers. The issue occurs because the end value of the byte range is not properly validated against the total response size. If GLib is compiled with GDISABLECHECKS, the call to gbytesnewfrombytes() may create a slice that exceeds the bounds of the original buffer. A specially crafted HTTP request with a large range value can cause heap memory beyond the intended response body to be returned to the attacker. This vulnerability can be triggered remotely without authentication or user interaction, potentially exposing portions of server heap memory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2439671?
The severity of REDHAT-BUG-2439671 is classified as moderate due to the potential for out-of-bounds read vulnerabilities.
How do I fix REDHAT-BUG-2439671?
To fix REDHAT-BUG-2439671, ensure you are using a corrected version of libsoup that addresses the validation of HTTP Range headers.
What systems are affected by REDHAT-BUG-2439671?
REDHAT-BUG-2439671 affects the libsoup library, particularly in environments where GLib is compiled with G_DISABLE_CHECKS.
What potential impacts can REDHAT-BUG-2439671 have?
The potential impacts of REDHAT-BUG-2439671 include the possibility of memory leaks or crashes when processing HTTP requests with invalid byte ranges.
Is there a workaround for REDHAT-BUG-2439671?
As a temporary workaround for REDHAT-BUG-2439671, users may consider disabling features that rely on the affected functionality until a patch is applied.