libsoup3 vulnerabilities
Discription

image
Releases Ubuntu 24.10 Ubuntu 24.04 LTS Ubuntu 22.04 LTS Packages libsoup3 – GObject introspection data for the libsoup HTTP library Details It was discovered that libsoup ignored certain characters at the end of header names. A remote attacker could possibly use this issue to perform a HTTP request smuggling attack. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2024-52530) It was discovered that libsoup did not correctly handle memory while performing UTF-8 conversions. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2024-52531) It was discovered that libsoup could enter an infinite loop when reading certain websocket data. An attacker could possibly use this issue to cause a denial of service….Read More

Back to Main

Subscribe for the latest news: