תיאור (מקור, אנגלית)
A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.
מוצרים מושפעים
gnome: libsoup; redhat: codeready linux builder; redhat: codeready linux builder for arm64; redhat: codeready linux builder for arm64 eus; redhat: codeready linux builder for ibm z systems; redhat: codeready linux builder for ibm z systems eus; redhat: codeready linux builder for power little endian; redhat: codeready linux builder for power little endian eus; redhat: enterprise linux; redhat: enterprise linux eus; redhat: enterprise linux for arm 64; redhat: enterprise linux for arm 64 eus; redhat: enterprise linux for ibm z systems; redhat: enterprise linux for ibm z systems eus; redhat: enterprise linux for power little endian
קישורים10
- gitlab.gnome.org/GNOME/libsoup/-/issues/422 ExploitIssue Tracking
- gitlab.gnome.org/GNOME/libsoup/-/issues/422 ExploitIssue Tracking
- access.redhat.com/errata/RHSA-2025:21657
- access.redhat.com/errata/RHSA-2025:7505 Third Party Advisory
- access.redhat.com/errata/RHSA-2025:8126 Third Party Advisory
- access.redhat.com/errata/RHSA-2025:8132 Third Party Advisory
- access.redhat.com/errata/RHSA-2025:8139 Third Party Advisory
- access.redhat.com/errata/RHSA-2025:8140 Third Party Advisory
- access.redhat.com/errata/RHSA-2025:8252 Third Party Advisory
- access.redhat.com/errata/RHSA-2025:8480 Third Party Advisory
מדדים
- CVSS 3.1
-
6.5
MEDIUM
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N - EPSS — סבירות ניצול
- 1% אחוזון 59 · נכון ל-7 בנובמבר 2026
- CWE
- CWE-125
האם אפשר לנצל את הפגיעות הזו אצלכם?
עדכון אבטחה סוגר את הפרצה הידועה. בדיקת חדירות מראה לאן תוקף עדיין יכול להגיע — עם הוכחה.