rpm package
suse/libsoup&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5
pkg:rpm/suse/libsoup&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5
Vulnerabilities (32)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-2708 | Low | 3.7 | < 3.0.4-150400.3.34.1 | 3.0.4-150400.3.34.1 | Apr 23, 2026 | A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditionally appends each header value without validating for duplicate or conflicting Content-Length fields. | |
| CVE-2026-2369 | Med | 6.5 | < 3.0.4-150400.3.34.1 | 3.0.4-150400.3.34.1 | Mar 19, 2026 | A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access sensitive information or cause an application level denial of service. | |
| CVE-2026-2443 | — | < 3.0.4-150400.3.34.1 | 3.0.4-150400.3.34.1 | Feb 13, 2026 | A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access port | ||
| CVE-2026-1761 | Hig | 8.6 | < 3.0.4-150400.3.31.1 | 3.0.4-150400.3.31.1 | Feb 2, 2026 | A flaw was found in libsoup. This stack-based buffer overflow vulnerability occurs during the parsing of multipart HTTP responses due to an incorrect length calculation. A remote attacker can exploit this by sending a specially crafted multipart HTTP response, which can lead to m | |
| CVE-2026-1760 | Med | 5.3 | < 3.0.4-150400.3.37.1 | 3.0.4-150400.3.37.1 | Feb 2, 2026 | A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer improperly handles requests that combine Transfer-Encoding: chunked and Connection: keep-alive headers. A remote, unauthenticated client can exploit this by sending specially craft | |
| CVE-2026-1539 | — | < 3.0.4-150400.3.37.1 | 3.0.4-150400.3.37.1 | Jan 28, 2026 | A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirect | ||
| CVE-2026-1536 | — | < 3.0.4-150400.3.31.1 | 3.0.4-150400.3.31.1 | Jan 28, 2026 | A flaw was found in libsoup. An attacker who can control the input for the Content-Disposition header can inject CRLF (Carriage Return Line Feed) sequences into the header value. These sequences are then interpreted verbatim when the HTTP request or response is constructed, allow | ||
| CVE-2026-1467 | — | < 3.0.4-150400.3.37.1 | 3.0.4-150400.3.37.1 | Jan 27, 2026 | A flaw was found in libsoup, an HTTP client library. This vulnerability, known as CRLF (Carriage Return Line Feed) Injection, occurs when an HTTP proxy is configured and the library improperly handles URL-decoded input used to create the Host header. A remote attacker can exploit | ||
| CVE-2026-0716 | Med | 4.8 | < 3.0.4-150400.3.28.1 | 3.0.4-150400.3.28.1 | Jan 13, 2026 | A flaw was found in libsoup’s WebSocket frame processing when handling incoming messages. If a non-default configuration is used where the maximum incoming payload size is unset, the library may read memory outside the intended bounds. This can cause unintended memory exposure or | |
| CVE-2026-0719 | Hig | 8.6 | < 3.0.4-150400.3.28.1 | 3.0.4-150400.3.28.1 | Jan 8, 2026 | A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication. When processing extremely long passwords, an internal size calculation can overflow due to improper use of signed integers. This | |
| CVE-2025-14523 | Hig | 8.2 | < 3.0.4-150400.3.28.1 | 3.0.4-150400.3.28.1 | Dec 11, 2025 | A flaw in libsoup’s HTTP header handling allows multiple Host: headers in a request and returns the last occurrence for server-side processing. Common front proxies often honor the first Host: header, so this mismatch can cause vhost confusion where a proxy routes a request to on | |
| CVE-2025-12105 | Hig | 7.5 | < 3.0.4-150400.3.21.1 | 3.0.4-150400.3.21.1 | Oct 23, 2025 | A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed tw | |
| CVE-2025-11021 | Hig | 7.5 | < 3.0.4-150400.3.18.1 | 3.0.4-150400.3.18.1 | Sep 26, 2025 | A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw coul | |
| CVE-2025-4969 | Med | 6.5 | < 3.0.4-150400.3.10.1 | 3.0.4-150400.3.10.1 | May 21, 2025 | A vulnerability was found in the libsoup package. This flaw stems from its failure to correctly verify the termination of multipart HTTP messages. This can allow a remote attacker to send a specially crafted multipart HTTP body, causing the libsoup-consuming server to read beyond | |
| CVE-2025-4948 | Hig | 7.5 | < 3.0.4-150400.3.10.1 | 3.0.4-150400.3.10.1 | May 19, 2025 | A flaw was found in the soup_multipart_new_from_message() function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the library processes specially crafted multipart messages. Due to improper v | |
| CVE-2025-4476 | Med | 4.3 | < 3.0.4-150400.3.10.1 | 3.0.4-150400.3.10.1 | May 16, 2025 | A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives a 401 (Unauthorized) HTTP response containing a specifically crafted domain parameter within the WWW-Authenticate header. Processing | |
| CVE-2025-46421 | Med | 6.8 | < 3.0.4-150400.3.7.1 | 3.0.4-150400.3.7.1 | Apr 24, 2025 | A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impersonate the user to the original host that issued the redirect. | |
| CVE-2025-46420 | Med | 6.5 | < 3.0.4-150400.3.7.1 | 3.0.4-150400.3.7.1 | Apr 24, 2025 | A flaw was found in libsoup. It is vulnerable to memory leaks in the soup_header_parse_quality_list() function when parsing a quality list that contains elements with all zeroes. | |
| CVE-2025-32911 | Cri | 9.0 | < 3.0.4-150400.3.21.1 | 3.0.4-150400.3.21.1 | Apr 15, 2025 | A use-after-free type vulnerability was found in libsoup, in the soup_message_headers_get_content_disposition() function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server. | |
| CVE-2025-32914 | Hig | 7.4 | < 3.0.4-150400.3.7.1 | 3.0.4-150400.3.7.1 | Apr 14, 2025 | A flaw was found in libsoup, where the soup_multipart_new_from_message() function is vulnerable to an out-of-bounds read. This flaw allows a malicious HTTP client to induce the libsoup server to read out of bounds. |
- affected < 3.0.4-150400.3.34.1fixed 3.0.4-150400.3.34.1
A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditionally appends each header value without validating for duplicate or conflicting Content-Length fields.
- affected < 3.0.4-150400.3.34.1fixed 3.0.4-150400.3.34.1
A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access sensitive information or cause an application level denial of service.
- CVE-2026-2443Feb 13, 2026affected < 3.0.4-150400.3.34.1fixed 3.0.4-150400.3.34.1
A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access port
- affected < 3.0.4-150400.3.31.1fixed 3.0.4-150400.3.31.1
A flaw was found in libsoup. This stack-based buffer overflow vulnerability occurs during the parsing of multipart HTTP responses due to an incorrect length calculation. A remote attacker can exploit this by sending a specially crafted multipart HTTP response, which can lead to m
- affected < 3.0.4-150400.3.37.1fixed 3.0.4-150400.3.37.1
A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer improperly handles requests that combine Transfer-Encoding: chunked and Connection: keep-alive headers. A remote, unauthenticated client can exploit this by sending specially craft
- CVE-2026-1539Jan 28, 2026affected < 3.0.4-150400.3.37.1fixed 3.0.4-150400.3.37.1
A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirect
- CVE-2026-1536Jan 28, 2026affected < 3.0.4-150400.3.31.1fixed 3.0.4-150400.3.31.1
A flaw was found in libsoup. An attacker who can control the input for the Content-Disposition header can inject CRLF (Carriage Return Line Feed) sequences into the header value. These sequences are then interpreted verbatim when the HTTP request or response is constructed, allow
- CVE-2026-1467Jan 27, 2026affected < 3.0.4-150400.3.37.1fixed 3.0.4-150400.3.37.1
A flaw was found in libsoup, an HTTP client library. This vulnerability, known as CRLF (Carriage Return Line Feed) Injection, occurs when an HTTP proxy is configured and the library improperly handles URL-decoded input used to create the Host header. A remote attacker can exploit
- affected < 3.0.4-150400.3.28.1fixed 3.0.4-150400.3.28.1
A flaw was found in libsoup’s WebSocket frame processing when handling incoming messages. If a non-default configuration is used where the maximum incoming payload size is unset, the library may read memory outside the intended bounds. This can cause unintended memory exposure or
- affected < 3.0.4-150400.3.28.1fixed 3.0.4-150400.3.28.1
A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication. When processing extremely long passwords, an internal size calculation can overflow due to improper use of signed integers. This
- affected < 3.0.4-150400.3.28.1fixed 3.0.4-150400.3.28.1
A flaw in libsoup’s HTTP header handling allows multiple Host: headers in a request and returns the last occurrence for server-side processing. Common front proxies often honor the first Host: header, so this mismatch can cause vhost confusion where a proxy routes a request to on
- affected < 3.0.4-150400.3.21.1fixed 3.0.4-150400.3.21.1
A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed tw
- affected < 3.0.4-150400.3.18.1fixed 3.0.4-150400.3.18.1
A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw coul
- affected < 3.0.4-150400.3.10.1fixed 3.0.4-150400.3.10.1
A vulnerability was found in the libsoup package. This flaw stems from its failure to correctly verify the termination of multipart HTTP messages. This can allow a remote attacker to send a specially crafted multipart HTTP body, causing the libsoup-consuming server to read beyond
- affected < 3.0.4-150400.3.10.1fixed 3.0.4-150400.3.10.1
A flaw was found in the soup_multipart_new_from_message() function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the library processes specially crafted multipart messages. Due to improper v
- affected < 3.0.4-150400.3.10.1fixed 3.0.4-150400.3.10.1
A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives a 401 (Unauthorized) HTTP response containing a specifically crafted domain parameter within the WWW-Authenticate header. Processing
- affected < 3.0.4-150400.3.7.1fixed 3.0.4-150400.3.7.1
A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impersonate the user to the original host that issued the redirect.
- affected < 3.0.4-150400.3.7.1fixed 3.0.4-150400.3.7.1
A flaw was found in libsoup. It is vulnerable to memory leaks in the soup_header_parse_quality_list() function when parsing a quality list that contains elements with all zeroes.
- affected < 3.0.4-150400.3.21.1fixed 3.0.4-150400.3.21.1
A use-after-free type vulnerability was found in libsoup, in the soup_message_headers_get_content_disposition() function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server.
- affected < 3.0.4-150400.3.7.1fixed 3.0.4-150400.3.7.1
A flaw was found in libsoup, where the soup_multipart_new_from_message() function is vulnerable to an out-of-bounds read. This flaw allows a malicious HTTP client to induce the libsoup server to read out of bounds.
Page 1 of 2