Description
A vulnerability was found in the libsoup package. This flaw stems from its failure to correctly verify the termination of multipart HTTP messages. This can allow a remote attacker to send a specially crafted multipart HTTP body, causing the libsoup-consuming server to read beyond its allocated memory boundaries (out-of-bounds read).
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
libsoup
Default version status: unaffected
0 to ≤ 3.6.5affected
Red Hat Red Hat Enterprise Linux 10
Default version status: affected
Red Hat Red Hat Enterprise Linux 6
Default version status: unknown
Red Hat Red Hat Enterprise Linux 7
Default version status: unknown
Red Hat Red Hat Enterprise Linux 8
Default version status: unknown
Red Hat Red Hat Enterprise Linux 9
Default version status: affected