Libsoup CVE-2024-52532

libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soup_ntlm_parse_challenge() in soup

GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of he

A flaw was found in libsoup. Rated high severity (CVSS 7.0), this vulnerability is remotely exploitable, no authenticati

GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_pars

The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty

HTTP request smuggling in libsoup (GNOME's HTTP client/server library) enables network-accessible attackers to inject hi

libsoup leaks proxy credentials to destination servers via Proxy-Authorization header attachment after CONNECT tunnel es

Heap buffer over-read in libsoup's multipart response parser allows remote, unauthenticated attackers to crash client ap

libsoup versions prior to the patched release contain an integer underflow vulnerability in zero-length resource process

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKit

libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca-file does not exist, w

Heap out-of-bounds read in libsoup's multipart HTTP message parser allows remote attackers to crash affected application