NetSight
IP …
high7.0

CVE-2025-2784

A flaw was found in libsoup.

Impact

A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.

Affected products

VendorProductAffected versions
GnomeLibsoup
before 3.6.5
RedhatCodeready Linux Builder
Version 10.0
RedhatCodeready Linux Builder For Arm64
Version 10.0_aarch64
RedhatCodeready Linux Builder For Arm64 Eus
Version 10.0_aarch64
RedhatCodeready Linux Builder For Ibm Z Systems
Version 10.0_s390x
RedhatCodeready Linux Builder For Ibm Z Systems Eus
Version 10.0_s390x
RedhatCodeready Linux Builder For Power Little Endian
Version 10.0_ppc64le
RedhatCodeready Linux Builder For Power Little Endian Eus
Version 10.0_ppc64le
RedhatEnterprise Linux
Versions 8.0, 9.0, 10.0
RedhatEnterprise Linux Eus
Versions 8.8, 9.2, 9.4, 9.6, 10.0
RedhatEnterprise Linux For Arm 64
Versions 8.0_aarch64, 9.0_aarch64, 10.0_aarch64
RedhatEnterprise Linux For Arm 64 Eus
Versions 8.8_aarch64, 9.2_aarch64, 9.4_aarch64, 9.6_aarch64, 10.0_aarch64
Red HatRed Hat Enterprise Linux 9.0 Update Services For SAP Solutions
Version patch: 0:2.72.0-8.el9_0.5
Red HatRed Hat Enterprise Linux 9
Version patch: 0:2.72.0-10.el9_6.2
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
Version patch: 0:2.62.2-9.el7_9
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support
Version patch: 0:2.62.3-3.el8_8.5
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Version patch: 0:2.62.3-2.el8_6.5
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
Version patch: 0:2.62.3-2.el8_6.5
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support
Version patch: 0:2.62.3-1.el8_2.5
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support
Version patch: 0:2.72.0-8.el9_2.5
Red HatRed Hat Enterprise Linux 10
Version patch: 0:3.6.5-3.el10_0
Red HatRed Hat Enterprise Linux 8.6 Update Services For SAP Solutions
Version patch: 0:2.62.3-2.el8_6.5
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
Version patch: 0:2.72.0-8.el9_4.5
Red HatRed Hat Enterprise Linux 8
Version patch: 0:2.62.3-9.el8_10

Weakness classification

CWE-125

References