by Kastro CVE-2025-32911
Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support — Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value
Description · from the CVE record
A use-after-free type vulnerability was found in libsoup, in the soup_message_headers_get_content_disposition() function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server.
Affected
ProductAffectedFixed inSource
libsoup< 3.6.33.6.3CNA
Red Hat Enterprise Linux 7 Extended Lifecycle Supportsee advisory0:2.62.2-9.el7_9CNA
Red Hat Enterprise Linux 7 Extended Lifecycle Supportsee advisory0:2.62.2-6.el7_9CNA
Red Hat Enterprise Linux 8see advisory0:2.62.3-8.el8_10CNA
Red Hat Enterprise Linux 8see advisory0:2.8-3.el8_10.1CNA
Red Hat Enterprise Linux 8see advisory0:8.10-1CNA
Red Hat Enterprise Linux 8see advisory0:2.62.3-8.el8_10CNA
Red Hat Enterprise Linux 8.2 Advanced Update Supportsee advisory0:2.62.3-1.el8_2.4CNA
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportsee advisory0:2.62.3-2.el8_4.4CNA
Red Hat Enterprise Linux 8.4 Telecommunications Update Servicesee advisory0:2.62.3-2.el8_4.4CNA
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutionssee advisory0:2.62.3-2.el8_4.4CNA
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportsee advisory0:2.62.3-2.el8_6.4CNA
Scores by source
redhat (CNA)9.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total