https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 05:41:22 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:23139 <p><strong>Affected:</strong> AlmaLinux:10: libsoup3-doc</p> <p>Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago.</p> <p>Security Fix(es):</p> <p>* libsoup: Heap Use-After-Free in libsoup message queue handling during HTTP/2 read completion (CVE-2025-12105)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: libsoup3-doc</p> <p>Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago.</p> <p>Security Fix(es):</p> <p>* libsoup: Heap Use-After-Free in libsoup message queue handling during HTTP/2 read completion (CVE-2025-12105)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:23139 https://cve.radiocsirt.org/vuln/bdu:2026-11982 bdu:2026-11982 https://cve.radiocsirt.org/vuln/bdu:2026-11982 https://cve.radiocsirt.org/vuln/euvd-2026-331232 EUVD-2026-331232 https://cve.radiocsirt.org/vuln/euvd-2026-331232 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12105 <p>A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed twice due to missing state synchronization. This leads to a use-after-free memory access, potentially crashing the affected application. Attackers could exploit this behavior remotely by triggering specific HTTP/2 read and cancel sequences, resulting in a denial-of-service condition.</p> <p>A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed twice due to missing state synchronization. This leads to a use-after-free memory access, potentially crashing the affected application. Attackers could exploit this behavior remotely by triggering specific HTTP/2 read and cancel sequences, resulting in a denial-of-service condition.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-12105 https://cve.radiocsirt.org/vuln/ghsa-gppq-jw9r-4v4j <p>A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed twice due to missing state synchronization. This leads to a use-after-free memory access, potentially crashing the affected application. Attackers could exploit this behavior remotely by triggering specific HTTP/2 read and cancel sequences, resulting in a denial-of-service condition.</p> <p>A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed twice due to missing state synchronization. This leads to a use-after-free memory access, potentially crashing the affected application. Attackers could exploit this behavior remotely by triggering specific HTTP/2 read and cancel sequences, resulting in a denial-of-service condition.</p> https://cve.radiocsirt.org/vuln/ghsa-gppq-jw9r-4v4j https://cve.radiocsirt.org/vuln/msrc_cve-2025-12105 msrc_CVE-2025-12105 https://cve.radiocsirt.org/vuln/msrc_cve-2025-12105 https://cve.radiocsirt.org/vuln/oesa-2026-2337 <p><strong>Affected:</strong> openEuler:24.03-LTS: libsoup3</p> <p>Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. Security Fix(es):</p> <p>A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed twice due to missing state synchronization. This leads to a use-after-free memory access, potentially crashing the affected application. Attackers could exploit this behavior remotely by triggering specific HTTP/2 read and cancel sequences, resulting in a denial-of-service condition.(CVE-2025-12105)</p> <p>A flaw in libsoup’s HTTP header handling allows multiple Host: headers in a request and returns the last occurrence for server-side processing. Common front proxies often honor the first Host: header, so this mismatch can cause vhost confusion where a proxy routes a request to one backend but the backend interprets it as destined for another host. This discrepancy enables request-smuggling style attacks, cache poisoning, or bypassing host-based access controls when an attacker supplies duplicate Host headers.(CVE-2025-14523)</p> <p>A flaw was found in libsoup. It is vulnerable to memory leaks in the soup_header_parse_quality_list() function when parsing a quality list that cont…</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: libsoup3</p> <p>Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. Security Fix(es):</p> <p>A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed twice due to missing state synchronization. This leads to a use-after-free memory access, potentially crashing the affected application. Attackers could exploit this behavior remotely by triggering specific HTTP/2 read and cancel sequences, resulting in a denial-of-service condition.(CVE-2025-12105)</p> <p>A flaw in libsoup’s HTTP header handling allows multiple Host: headers in a request and returns the last occurrence for server-side processing. Common front proxies often honor the first Host: header, so this mismatch can cause vhost confusion where a proxy routes a request to one backend but the backend interprets it as destined for another host. This discrepancy enables request-smuggling style attacks, cache poisoning, or bypassing host-based access controls when an attacker supplies duplicate Host headers.(CVE-2025-14523)</p> <p>A flaw was found in libsoup. It is vulnerable to memory leaks in the soup_header_parse_quality_list() function when parsing a quality list that cont…</p> https://cve.radiocsirt.org/vuln/oesa-2026-2337 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15766-1 <p>libsoup-3_0-0-3.6.5-9.1 on GA media</p> <p>libsoup-3_0-0-3.6.5-9.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15766-1 https://cve.radiocsirt.org/vuln/rhsa-2025:23437 <p>libsoup: Heap Use-After-Free in libsoup message queue handling during HTTP/2 read completion</p> <p>libsoup: Heap Use-After-Free in libsoup message queue handling during HTTP/2 read completion</p> https://cve.radiocsirt.org/vuln/rhsa-2025:23437 https://cve.radiocsirt.org/vuln/suse-su-2026:20360-1 <p>Security update for libsoup</p> <p>Security update for libsoup</p> https://cve.radiocsirt.org/vuln/suse-su-2026:20360-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-12105 <p><strong>Affected:</strong> Ubuntu:Pro:22.04:LTS: libsoup3, Ubuntu:24.04:LTS: libsoup3, Ubuntu:25.10: libsoup3</p> <p>A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed twice due to missing state synchronization. This leads to a use-after-free memory access, potentially crashing the affected application. Attackers could exploit this behavior remotely by triggering specific HTTP/2 read and cancel sequences, resulting in a denial-of-service condition.</p> <p><strong>Affected:</strong> Ubuntu:Pro:22.04:LTS: libsoup3, Ubuntu:24.04:LTS: libsoup3, Ubuntu:25.10: libsoup3</p> <p>A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed twice due to missing state synchronization. This leads to a use-after-free memory access, potentially crashing the affected application. Attackers could exploit this behavior remotely by triggering specific HTTP/2 read and cancel sequences, resulting in a denial-of-service condition.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-12105 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2830 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (libsoup) ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (libsoup) ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2830