Known vulnerabilities in libsoup (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:libsoup_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 74
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libsoup (Red Hat package) libsoup (Red Hat package) is affected by 74 known vulnerabilities: 2 critical, 36 high, 23 medium, 13 low Critical High Medium Low

Vulnerabilities (74)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122663 - Stack-based buffer overflow
CVE-2026-0719
CWE-121 Critical
No
No
2.62.2-11.el7_9, 2.62.3-1.el8_2.8, 2.62.3-2.el8_4.8, 2.62.3-2.el8_6.8, 2.62.3-3.el8_8.8, 2.62.3-13.el8_10, 2.72.0-8.el9_0.9, 2.72.0-8.el9_2.10, 2.72.0-8.el9_4.9, 2.72.0-10.el9_6.6 11.02.2026 SB2026021138
SB2026021139
SB2026021140
and 34 more
#VU122662 - Stack-based buffer overflow
CVE-2026-1761
CWE-121 Critical
No
No
2.62.2-11.el7_9, 2.62.3-1.el8_2.8, 2.62.3-2.el8_4.8, 2.62.3-2.el8_6.8, 2.62.3-3.el8_8.8, 2.62.3-13.el8_10, 2.72.0-8.el9_0.9, 2.72.0-8.el9_2.10, 2.72.0-8.el9_4.9, 2.72.0-10.el9_6.6 11.02.2026 SB2026021138
SB2026021143
SB2026021144
and 33 more
#VU119956 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-14523
CWE-444 Medium
No
No
2.62.2-10.el7_9, 2.62.3-1.el8_2.7, 2.62.3-2.el8_4.7, 2.62.3-2.el8_6.7, 2.62.3-3.el8_8.7, 2.62.3-11.el8_10, 2.72.0-8.el9_0.8, 2.72.0-8.el9_2.8, 2.72.0-8.el9_4.8, 2.72.0-10.el9_6.5, 2.72.0-12.el9_7.3 15.12.2025 SB2025121511
SB2026011201
SB2026011202
and 36 more
#VU117708 - Out-of-bounds read
CVE-2025-11021
CWE-125 Medium
No
No
2.62.2-9.el7_9, 2.62.3-1.el8_2.6, 2.62.3-2.el8_4.6, 2.62.3-2.el8_6.6, 2.62.3-3.el8_8.6, 2.62.3-10.el8_10, 2.72.0-8.el9_0.6, 2.72.0-8.el9_2.6, 2.72.0-8.el9_4.6, 2.72.0-12.el9_7.1 28.10.2025 SB2025102860
SB2025102862
SB2025102864
and 20 more
#VU109946 - Integer overflow
CVE-2025-4945
CWE-190 High
No
No
2.62.2-9.el7_9, 2.62.3-1.el8_2.6, 2.62.3-2.el8_4.6, 2.62.3-2.el8_6.6, 2.62.3-3.el8_8.6, 2.62.3-10.el8_10, 2.72.0-8.el9_0.6, 2.72.0-8.el9_2.6, 2.72.0-8.el9_4.6, 2.72.0-12.el9_7.1 29.05.2025 SB2025052993
SB2025053009
SB2025053020
and 27 more
#VU109945 - Integer underflow
CVE-2025-4948
CWE-191 Low
No
No
2.62.2-6.el7_9, 2.62.2-9.el7_9, 2.62.3-1.el8_2.5, 2.62.3-2.el8_4.5, 2.62.3-2.el8_6.5, 2.62.3-3.el8_8.5, 2.62.3-9.el8_10, 2.72.0-8.el9_0.5, 2.72.0-8.el9_2.5, 2.72.0-8.el9_4.5, 2.72.0-10.el9_6.2 29.05.2025 SB2025052993
SB20250529113
SB20250529114
and 36 more
#VU109942 - Out-of-bounds read
CVE-2025-32914
CWE-125 Medium
No
No
2.62.2-6.el7_9, 2.62.2-9.el7_9, 2.62.3-1.el8_2.5, 2.62.3-2.el8_4.5, 2.62.3-2.el8_6.5, 2.62.3-3.el8_8.5, 2.62.3-9.el8_10, 2.72.0-8.el9_0.5, 2.72.0-8.el9_2.5, 2.72.0-8.el9_4.5, 2.72.0-10.el9_6.2 29.05.2025 SB2025052993
SB20250529101
SB20250529113
and 29 more
#VU109941 - Resource exhaustion
CVE-2025-32907
CWE-400 Medium
No
No
2.72.0-8.el9_0.4, 2.72.0-8.el9_2.4, 2.72.0-8.el9_4.4, 2.72.0-10.el9_6.1 29.05.2025 SB2025052993
SB2025052994
SB2025052995
and 27 more
#VU109940 - Resource exhaustion
CVE-2025-32049
CWE-400 Medium
No
No
2.62.2-6.el7_9, 2.62.2-9.el7_9, 2.62.3-1.el8_2.5, 2.62.3-2.el8_4.5, 2.62.3-2.el8_6.5, 2.62.3-3.el8_8.5, 2.62.3-9.el8_10, 2.72.0-8.el9_0.5, 2.72.0-8.el9_2.5, 2.72.0-8.el9_4.5, 2.72.0-10.el9_6.2 29.05.2025 SB2025052993
SB20250529113
SB20250529114
and 22 more
#VU109938 - Exposure of sensitive information to an unauthorized actor
CVE-2025-46421
CWE-200 Low
No
No
2.62.3-1.el8_2.4, 2.62.3-2.el8_4.4, 2.62.3-2.el8_6.4, 2.62.3-3.el8_8.4, 2.62.3-8.el8_10, 2.72.0-8.el9_0.4, 2.72.0-8.el9_2.4, 2.72.0-8.el9_4.4, 2.72.0-10.el9_6.1 29.05.2025 SB2025052715
SB20250529101
SB20250529102
and 26 more
#VU109937 - Missing release of memory after effective lifetime
CVE-2025-46420
CWE-401 Low
No
No
2.62.3-1.el8_2.4, 2.62.3-2.el8_4.4, 2.62.3-2.el8_6.4, 2.62.3-3.el8_8.4, 2.62.3-8.el8_10, 2.72.0-8.el9_0.4, 2.72.0-8.el9_2.4, 2.72.0-8.el9_4.4, 2.72.0-10.el9_6.1 29.05.2025 SB2025052992
SB20250529101
SB20250529102
and 29 more
#VU109936 - Use After Free
CVE-2025-32911
CWE-416 High
No
No
2.62.2-6.el7_9, 2.62.2-9.el7_9, 2.62.3-1.el8_2.4, 2.62.3-2.el8_4.4, 2.62.3-2.el8_6.4, 2.62.3-3.el8_8.4, 2.62.3-8.el8_10, 2.72.0-8.el9_0.4, 2.72.0-8.el9_2.4, 2.72.0-8.el9_4.4, 2.72.0-10.el9_6.1 29.05.2025 SB2025052992
SB2025052997
SB2025052998
and 33 more
#VU109931 - Buffer over-read
CVE-2025-32050
CWE-126 Medium
No
No
2.62.3-3.el8_8.4, 2.62.3-8.el8_10, 2.72.0-8.el9_2.4, 2.72.0-8.el9_4.4, 2.72.0-10.el9_6.1 29.05.2025 SB2024111329
SB2025052980
SB2025052994
and 28 more
#VU109929 - Buffer over-read
CVE-2025-32052
CWE-126 Medium
No
No
2.62.3-3.el8_8.4, 2.62.3-8.el8_10, 2.72.0-8.el9_2.4, 2.72.0-8.el9_4.4, 2.72.0-10.el9_6.1 29.05.2025 SB2024111329
SB2025052980
SB2025052994
and 32 more
#VU109927 - Buffer over-read
CVE-2025-32053
CWE-126 Medium
No
No
2.62.3-3.el8_8.4, 2.62.3-8.el8_10, 2.72.0-8.el9_2.4, 2.72.0-8.el9_4.4, 2.72.0-10.el9_6.1 29.05.2025 SB2024111329
SB2025052980
SB2025052994
and 29 more
#VU109926 - Buffer over-read
CVE-2025-2784
CWE-126 Medium
No
No
2.62.2-6.el7_9, 2.62.2-9.el7_9, 2.62.3-1.el8_2.5, 2.62.3-2.el8_4.5, 2.62.3-2.el8_6.5, 2.62.3-3.el8_8.5, 2.62.3-9.el8_10, 2.72.0-8.el9_0.5, 2.72.0-8.el9_2.5, 2.72.0-8.el9_4.5, 2.72.0-10.el9_6.2 29.05.2025 SB2025052715
SB2025052980
SB20250529113
and 29 more
#VU109838 - NULL Pointer Dereference
CVE-2025-32913
CWE-476 High
No
No
2.62.2-6.el7_9, 2.62.2-9.el7_9, 2.62.3-1.el8_2.4, 2.62.3-2.el8_4.4, 2.62.3-2.el8_6.4, 2.62.3-3.el8_8.4, 2.62.3-8.el8_10, 2.72.0-8.el9_0.4, 2.72.0-8.el9_2.4, 2.72.0-8.el9_4.4, 2.72.0-10.el9_6.1 27.05.2025 SB2025052718
SB2025052723
SB2025052997
and 33 more
#VU109834 - Out-of-bounds read
CVE-2025-32906
CWE-125 Medium
No
No
2.62.2-6.el7_9, 2.62.2-9.el7_9, 2.62.3-1.el8_2.4, 2.62.3-2.el8_4.4, 2.62.3-2.el8_6.4, 2.62.3-3.el8_8.4, 2.62.3-8.el8_10, 2.72.0-8.el9_0.4, 2.72.0-8.el9_2.4, 2.72.0-8.el9_4.4, 2.72.0-10.el9_6.1 27.05.2025 SB2025052715
SB2025052723
SB2025052994
and 37 more
#VU100995 - Memory corruption
CVE-2024-52531
CWE-119 Low
No
No
2.62.2-4.el7_9, 2.62.3-1.el8_2.2, 2.62.3-2.el8_4.2, 2.62.3-2.el8_6.2, 2.62.3-3.el8_8.2, 2.62.3-7.el8_10, 2.72.0-8.el9_0.3, 2.72.0-8.el9_2.3, 2.72.0-8.el9_4.3, 2.72.0-8.el9_5.3 27.11.2024 SB2024111329
SB2024112738
SB2024112739
and 35 more
#VU100446 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-52532
CWE-835 Low
No
No
2.62.3-6.el8_10, 2.72.0-8.el9_5.2 13.11.2024 SB2024111329
SB2024111341
SB2024111357
and 25 more


Showing elements 1 - 20 out of 74