Mageia 2024-0382: Critical libsoup3 advisory for buffer overflow issues
mageia
November 29, 2024
GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunke...
Summary
GNOME libsoup before 3.6.0 allows HTTP request smuggling in some
configurations because '\0' characters at the end of header names are
ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the
same as a "Transfer-Encoding: chunked" header. (CVE-2024-52530)
GNOME libsoup before 3.6.1 allows a buffer overflow in applications that
perform conversion to UTF-8 in soup_header_parse_param_list_strict.
Input received over the network cannot trigger this. (CVE-2024-52531)
GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption.
during the reading of certain patterns of WebSocket data from clients.
(CVE-2024-52532)
References
- https://bugs.mageia.org/show_bug.cgi?id=33765
- https://www.openwall.com/lists/oss-security/2024/11/09/2
- https://www.openwall.com/lists/oss-security/2024/11/12/8
- https://ubuntu.com/security/notices/USN-7126-1
- https://ubuntu.com/security/notices/USN-7127-1
- https://www.cve.org/CVERecord?id=CVE-2024-52530
- https://www.cve.org/CVERecord?id=CVE-2024-52531
- https://www.cve.org/CVERecord?id=CVE-2024-52532
Resolution
SRPMS
- 9/core/libsoup3-3.4.2-1.1.mga9
- 9/core/libsoup-2.74.3-1.1.mga9
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Publication date: 29 Nov 2024
URL: https://advisories.mageia.org/MGASA-2024-0382.html
Type: security
CVE: CVE-2024-52530,
CVE-2024-52531,
CVE-2024-52532
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!