CVEvulnerability

CVE-2025-32907

5.3 MEDIUM Published 2025-04-14 Modified 2026-06-30 Official page ↗
Status
Deferred
Published
2025-04-14
Last modified
2026-06-30
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-1050

Description

A flaw was found in libsoup. The implementation of HTTP range requests is vulnerable to a resource consumption attack. This flaw allows a malicious client to request the same range many times in a single HTTP request, causing the server to use large amounts of memory. This does not allow for a full denial of service.

Related

Weakness · CWE (1)

  • CWE-1050 Excessive Platform Resource Consumption within a Loop weakness

References