6.5
Moyenne
CVE-2024-52531 GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in…
Description
GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. There is a plausible way to reach this remotely via soup_message_headers_get_content_type (e.g., an application may want to retrieve the content type of a request or response).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| libsoup 3.6 | premières → < 3.6.1 | 3.6.1 |
Références
- gitlab.gnome.org gitlab.gnome.org
- gitlab.gnome.org gitlab.gnome.org
- gitlab.gnome.org gitlab.gnome.org
- offsec.almond.consulting offsec.almond.consulting
Chronologie
- Publiée
- Dernière modification
Autres CVE de libsoup
Les 5 CVE de libsoup →
CVE-2025-12105
Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion
7.5
Élevée
CVE-2024-52530
GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of…
7.5
Élevée
CVE-2024-52532
GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption
7.5
Élevée
CVE-2017-2885
An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58
9.8
Critique