Orta CVSS 6.5 PoC var
CVE-2025-2784: Libsoup: sınır dışı okuma
Açıklama (NVD)
A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.
Özet bilgiler
- Ürün
- Gnome Libsoup
- CVSS v3.1
- 6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N - EPSS
- %0,88 (yüzdelik 59)
- CWE
- CWE-125
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| gnome-libsoup | — | — | 3.6.5 |
| redhat-codeready-linux-builder | 10.0 | 10.0 | — |
| redhat-codeready-linux-builder-for-arm64 | 10.0_aarch64 | 10.0_aarch64 | — |
| redhat-codeready-linux-builder-for-arm64-eus | 10.0_aarch64 | 10.0_aarch64 | — |
| redhat-codeready-linux-builder-for-ibm-z-systems | 10.0_s390x | 10.0_s390x | — |
| redhat-codeready-linux-builder-for-ibm-z-systems-eus | 10.0_s390x | 10.0_s390x | — |
| redhat-codeready-linux-builder-for-power-little-endian | 10.0_ppc64le | 10.0_ppc64le | — |
| redhat-codeready-linux-builder-for-power-little-endian-eus | 10.0_ppc64le | 10.0_ppc64le | — |
| redhat-enterprise-linux | 8.0 | 8.0 | — |
| redhat-enterprise-linux | 9.0 | 9.0 | — |
| redhat-enterprise-linux | 10.0 | 10.0 | — |
| redhat-enterprise-linux-eus | 8.8 | 8.8 | — |
| redhat-enterprise-linux-eus | 9.2 | 9.2 | — |
| redhat-enterprise-linux-eus | 9.4 | 9.4 | — |
| redhat-enterprise-linux-eus | 9.6 | 9.6 | — |
| redhat-enterprise-linux-eus | 10.0 | 10.0 | — |
| redhat-enterprise-linux-for-arm-64 | 8.0_aarch64 | 8.0_aarch64 | — |
| redhat-enterprise-linux-for-arm-64 | 9.0_aarch64 | 9.0_aarch64 | — |
| redhat-enterprise-linux-for-arm-64 | 10.0_aarch64 | 10.0_aarch64 | — |
| redhat-enterprise-linux-for-arm-64-eus | 8.8_aarch64 | 8.8_aarch64 | — |
| redhat-enterprise-linux-for-arm-64-eus | 9.2_aarch64 | 9.2_aarch64 | — |
| redhat-enterprise-linux-for-arm-64-eus | 9.4_aarch64 | 9.4_aarch64 | — |
| redhat-enterprise-linux-for-arm-64-eus | 9.6_aarch64 | 9.6_aarch64 | — |
| redhat-enterprise-linux-for-arm-64-eus | 10.0_aarch64 | 10.0_aarch64 | — |
| redhat-enterprise-linux-for-ibm-z-systems | 8.0_s390x | 8.0_s390x | — |
| redhat-enterprise-linux-for-ibm-z-systems | 9.0_s390x | 9.0_s390x | — |
| redhat-enterprise-linux-for-ibm-z-systems | 10.0_s390x | 10.0_s390x | — |
| redhat-enterprise-linux-for-ibm-z-systems-eus | 8.8_s390x | 8.8_s390x | — |
| redhat-enterprise-linux-for-ibm-z-systems-eus | 9.2_s390x | 9.2_s390x | — |
| redhat-enterprise-linux-for-ibm-z-systems-eus | 9.4_s390x | 9.4_s390x | — |