CVEvulnerability

CVE-2025-2784

6.5 MEDIUM Published 2025-04-03 Modified 2026-06-30 Official page ↗
Status
Modified
Published
2025-04-03
Last modified
2026-06-30
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.0 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-125

Description

A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.

Affected configurations

• gnome libsoup (< 3.6.5) • redhat codeready linux builder 10.0 • redhat codeready linux builder for arm64 10.0 aarch64 • redhat codeready linux builder for arm64 eus 10.0 aarch64 • redhat codeready linux builder for ibm z systems 10.0 s390x • redhat codeready linux builder for ibm z systems eus 10.0 s390x • redhat codeready linux builder for power little endian 10.0 ppc64le • redhat codeready linux builder for power little endian eus 10.0 ppc64le • redhat enterprise linux 8.0 • redhat enterprise linux 9.0 • redhat enterprise linux 10.0 • redhat enterprise linux eus 8.8 • redhat enterprise linux eus 9.2 • redhat enterprise linux eus 9.4 • redhat enterprise linux eus 9.6 • redhat enterprise linux eus 10.0 • redhat enterprise linux for arm 64 8.0 aarch64 • redhat enterprise linux for arm 64 9.0 aarch64 • redhat enterprise linux for arm 64 10.0 aarch64 • redhat enterprise linux for arm 64 eus 8.8 aarch64 • redhat enterprise linux for arm 64 eus 9.2 aarch64 • redhat enterprise linux for arm 64 eus 9.4 aarch64 • redhat enterprise linux for arm 64 eus 9.6 aarch64 • redhat enterprise linux for arm 64 eus 10.0 aarch64 • redhat enterprise linux for ibm z systems 8.0 s390x • redhat enterprise linux for ibm z systems 9.0 s390x • redhat enterprise linux for ibm z systems 10.0 s390x • redhat enterprise linux for ibm z systems eus 8.8 s390x • redhat enterprise linux for ibm z systems eus 9.2 s390x • redhat enterprise linux for ibm z systems eus 9.4 s390x • redhat enterprise linux for ibm z systems eus 9.6 s390x • redhat enterprise linux for ibm z systems eus 10.0 s390x • redhat enterprise linux for power little endian 8.0 ppc64le • redhat enterprise linux for power little endian 9.0 ppc64le • redhat enterprise linux for power little endian 10.0 ppc64le • redhat enterprise linux for power little endian eus 8.8 ppc64le • redhat enterprise linux for power little endian eus 9.2 ppc64le • redhat enterprise linux for power little endian eus 9.4 ppc64le • redhat enterprise linux for power little endian eus 9.6 ppc64le • redhat enterprise linux for power little endian eus 10.0 ppc64le • redhat enterprise linux server 7.0 • redhat enterprise linux server aus 8.2 • redhat enterprise linux server aus 8.4 • redhat enterprise linux server aus 8.6 • redhat enterprise linux server aus 9.2 • redhat enterprise linux server aus 9.4 • redhat enterprise linux server aus 9.6 • redhat enterprise linux server for power little endian update services for sap solutions 8.6 ppc64le • redhat enterprise linux server for power little endian update services for sap solutions 9.0 ppc64le • redhat enterprise linux server for power little endian update services for sap solutions 9.6 ppc64le • redhat enterprise linux server tus 8.6 • redhat enterprise linux server tus 8.8 • redhat enterprise linux update services for sap solutions 8.8 • redhat enterprise linux update services for sap solutions 9.0 • redhat enterprise linux update services for sap solutions 9.2 • redhat enterprise linux update services for sap solutions 9.4 • redhat enterprise linux update services for sap solutions 9.6

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References