The soup_headers_parse function in soup-headers.c for libsoup HTTP library before 2.2.99 allows remote attackers to cause a denial of service (crash) via malformed HTTP headers, probably involving missing fields or values.
| Version | Base score | Base severity | Vector |
|---|
| Hyperlink | Resource Type |
|---|
The soup_headers_parse function in soup-headers.c for libsoup HTTP library before 2.2.99 allows remote attackers to cause a denial of service (crash) via malformed HTTP headers, probably involving missing fields or values.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.debian.org/security/2007/dsa-1248 | vendor-advisory x_refsource_DEBIAN x_transferred |
| http://www.securityfocus.com/bid/22034 | vdb-entry x_refsource_BID x_transferred |
| https://issues.rpath.com/browse/RPL-965 | x_refsource_CONFIRM x_transferred |
| http://secunia.com/advisories/23961 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://secunia.com/advisories/23734 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.vupen.com/english/advisories/2007/0173 | vdb-entry x_refsource_VUPEN x_transferred |
| http://ftp.gnome.org/pub/gnome/sources/libsoup/2.2/libsoup-2.2.99.news | x_refsource_CONFIRM x_transferred |
| http://osvdb.org/31667 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.mandriva.com/security/advisories?name=MDKSA-2007:029 | vendor-advisory x_refsource_MANDRIVA x_transferred |
| http://fedoranews.org/cms/node/2509 | vendor-advisory x_refsource_FEDORA x_transferred |
| http://secunia.com/advisories/23871 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://secunia.com/advisories/23770 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://secunia.com/advisories/23873 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.ubuntu.com/usn/usn-411-1 | vendor-advisory x_refsource_UBUNTU x_transferred |
| http://secunia.com/advisories/23976 | third-party-advisory x_refsource_SECUNIA x_transferred |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/31519 | vdb-entry x_refsource_XF x_transferred |
The soup_headers_parse function in soup-headers.c for libsoup HTTP library before 2.2.99 allows remote attackers to cause a denial of service (crash) via malformed HTTP headers, probably involving missing fields or values.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 7.8 | HIGH | AV:N/AC:L/Au:N/C:N/I:N/A:C |
| CWE ID | Type | Source |
|---|---|---|
| NVD-CWE-Other | Primary | nvd@nist.gov |
Not vulnerable. The vulnerable code is not used by any application likned with libsoup shipped with Red Hat Enterprise Linux 2.1, 3, and 4. Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.
| Hyperlink | Source | Resource |
|---|---|---|
| http://fedoranews.org/cms/node/2509 | cve@mitre.org | N/A |
| http://ftp.gnome.org/pub/gnome/sources/libsoup/2.2/libsoup-2.2.99.news | cve@mitre.org | N/A |
| http://osvdb.org/31667 | cve@mitre.org | N/A |
| http://secunia.com/advisories/23734 | cve@mitre.org | N/A |
| http://secunia.com/advisories/23770 | cve@mitre.org | N/A |
| http://secunia.com/advisories/23871 | cve@mitre.org | N/A |
| http://secunia.com/advisories/23873 | cve@mitre.org | N/A |
| http://secunia.com/advisories/23961 | cve@mitre.org | N/A |
| http://secunia.com/advisories/23976 | cve@mitre.org | N/A |
| http://www.debian.org/security/2007/dsa-1248 | cve@mitre.org | N/A |
| http://www.mandriva.com/security/advisories?name=MDKSA-2007:029 | cve@mitre.org | N/A |
| http://www.securityfocus.com/bid/22034 | cve@mitre.org | N/A |
| http://www.ubuntu.com/usn/usn-411-1 | cve@mitre.org | N/A |
| http://www.vupen.com/english/advisories/2007/0173 | cve@mitre.org | N/A |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/31519 | cve@mitre.org | N/A |
| https://issues.rpath.com/browse/RPL-965 | cve@mitre.org | N/A |