Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 7: MGASA-2019-0312 Critical: Libsoup Denial of Service

mageia
Calendar Grey November 2, 2019
Dist Mageia Esm H88
Recent updates to libsoup packages rectify a security vulnerability that could permit denial of service attacks originating from hostile servers.
Updated libsoup package fixes security vulnerability: It was discovered that libsoup incorrectly handled parsing certain NTLM messages

Summary

Updated libsoup package fixes security vulnerability:
It was discovered that libsoup incorrectly handled parsing certain NTLM messages. If a user or automated system were tricked into connecting to a malicious server, a remote attacker could possibly use this issue to cause a denial of service (CVE-2019-17266).

References

- https://bugs.mageia.org/show_bug.cgi?id=25642

- https://ubuntu.com/security/notices/USN-4152-1

- https://www.cve.org/CVERecord?id=CVE-2019-17266

Topics%20covered

Topics Covered

security advisory denial of service package update libsoup Mageia

Resolution

SRPMS

- 7/core/libsoup-2.66.1-2.1.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 02 Nov 2019
URL: https://advisories.mageia.org/MGASA-2019-0312.html
Type: security
CVE: CVE-2019-17266

Topics%20covered

Topics Covered

security advisory denial of service package update libsoup Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here