Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-32912

Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authentication

Description

A flaw was found in libsoup, where SoupAuthDigest is vulnerable to a NULL pointer dereference. The HTTP server may cause the libsoup client to crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

libsoup

Default version status: unaffected

  • 0 to < 3.6.5affected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

  • 0:3.6.5-3.el10_0 to < *unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unknown

Red Hat Red Hat Enterprise Linux 7

Default version status: unknown

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

References