Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Libsoup: out of bounds reads in soup_headers_parse_request()

CVSS 3.1 7.5 HIGHCheck source for fixed versionsKEV status unknown

cve-program · CVE-2025-32906

Published

A flaw was found in libsoup, where the soup_headers_parse_request() function may be vulnerable to an out-of-bound read. This flaw allows a malicious user to use a specially crafted HTTP request to crash the HTTP server.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2025-32906

Published

libsoup

https://gitlab.gnome.org/GNOME/libsoup/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "3.6.5",
                            "versionType": "semver"
                        }
                    ],
                    "packageName": "libsoup",
                    "collectionURL": "https://gitlab.gnome.org/GNOME/libsoup/",
                    "defaultStatus": "unaffected"
                }

libsoup3

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 10",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "libsoup3",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.6.5-3.el10_0",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/o:redhat:enterprise_linux:10.0"
                    ]
                }

libsoup

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "libsoup",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:2.62.2-9.el7_9",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/o:redhat:rhel_els:7"
                    ]
                }

libsoup

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "libsoup",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:2.62.3-8.el8_10",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:enterprise_linux:8::appstream",
                        "cpe:/o:redhat:enterprise_linux:8::baseos"
                    ]
                }

mingw-freetype

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "mingw-freetype",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:2.8-3.el8_10.1",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:enterprise_linux:8::appstream",
                        "cpe:/a:redhat:enterprise_linux:8::crb"
                    ]
                }

spice-client-win

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "spice-client-win",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:8.10-1",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:enterprise_linux:8::appstream",
                        "cpe:/a:redhat:enterprise_linux:8::crb"
                    ]
                }

libsoup

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "libsoup",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:2.62.3-8.el8_10",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:enterprise_linux:8::appstream",
                        "cpe:/o:redhat:enterprise_linux:8::baseos"
                    ]
                }

libsoup

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "libsoup",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:2.62.3-1.el8_2.4",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_aus:8.2::appstream",
                        "cpe:/o:redhat:rhel_aus:8.2::baseos"
                    ]
                }

libsoup

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "libsoup",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:2.62.3-2.el8_4.4",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_aus:8.4::appstream",
                        "cpe:/a:redhat:rhel_e4s:8.4::appstream",
                        "cpe:/a:redhat:rhel_tus:8.4::appstream",
                        "cpe:/o:redhat:rhel_aus:8.4::baseos",
                        "cpe:/o:redhat:rhel_e4s:8.4::baseos",
                        "cpe:/o:redhat:rhel_tus:8.4::baseos"
                    ]
                }

libsoup

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "libsoup",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:2.62.3-2.el8_4.4",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_aus:8.4::appstream",
                        "cpe:/a:redhat:rhel_e4s:8.4::appstream",
                        "cpe:/a:redhat:rhel_tus:8.4::appstream",
                        "cpe:/o:redhat:rhel_aus:8.4::baseos",
                        "cpe:/o:redhat:rhel_e4s:8.4::baseos",
                        "cpe:/o:redhat:rhel_tus:8.4::baseos"
                    ]
                }

libsoup

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "libsoup",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:2.62.3-2.el8_4.4",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_aus:8.4::appstream",
                        "cpe:/a:redhat:rhel_e4s:8.4::appstream",
                        "cpe:/a:redhat:rhel_tus:8.4::appstream",
                        "cpe:/o:redhat:rhel_aus:8.4::baseos",
                        "cpe:/o:redhat:rhel_e4s:8.4::baseos",
                        "cpe:/o:redhat:rhel_tus:8.4::baseos"
                    ]
                }

libsoup

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "libsoup",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:2.62.3-2.el8_6.4",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_aus:8.6::appstream",
                        "cpe:/a:redhat:rhel_e4s:8.6::appstream",
                        "cpe:/a:redhat:rhel_tus:8.6::appstream",
                        "cpe:/o:redhat:rhel_aus:8.6::baseos",
                        "cpe:/o:redhat:rhel_e4s:8.6::baseos",
                        "cpe:/o:redhat:rhel_tus:8.6::baseos"
                    ]
                }

libsoup

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "libsoup",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:2.62.3-2.el8_6.4",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_aus:8.6::appstream",
                        "cpe:/a:redhat:rhel_e4s:8.6::appstream",
                        "cpe:/a:redhat:rhel_tus:8.6::appstream",
                        "cpe:/o:redhat:rhel_aus:8.6::baseos",
                        "cpe:/o:redhat:rhel_e4s:8.6::baseos",
                        "cpe:/o:redhat:rhel_tus:8.6::baseos"
                    ]
                }

libsoup

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "libsoup",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:2.62.3-2.el8_6.4",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_aus:8.6::appstream",
                        "cpe:/a:redhat:rhel_e4s:8.6::appstream",
                        "cpe:/a:redhat:rhel_tus:8.6::appstream",
                        "cpe:/o:redhat:rhel_aus:8.6::baseos",
                        "cpe:/o:redhat:rhel_e4s:8.6::baseos",
                        "cpe:/o:redhat:rhel_tus:8.6::baseos"
                    ]
                }

libsoup

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "libsoup",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:2.62.3-3.el8_8.4",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_eus:8.8::appstream",
                        "cpe:/o:redhat:rhel_eus:8.8::baseos"
                    ]
                }

libsoup

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 9",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "libsoup",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:2.72.0-10.el9_6.1",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:enterprise_linux:9::appstream"
                    ]
                }

libsoup

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "libsoup",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:2.72.0-8.el9_0.4",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_e4s:9.0::appstream"
                    ]
                }

libsoup

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "libsoup",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:2.72.0-8.el9_2.4",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_eus:9.2::appstream"
                    ]
                }

libsoup

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "libsoup",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:2.72.0-8.el9_4.4",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:rhel_eus:9.4::appstream"
                    ]
                }

libsoup

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 6",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "libsoup",
                    "defaultStatus": "unknown",
                    "cpes": [
                        "cpe:/o:redhat:rhel_els:6"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 14 Nov 10:21 UTC · 268 of 275 readable · 264 fully read · documentation 469/469 current