CVE-2025-32907

Medium CVSS: 5.3

A flaw was found in libsoup. The implementation of HTTP range requests is vulnerable to a resource consumption attack. This flaw allows a malicious client to request the same range many times in a single HTTP request, causing the server to use large amounts of memory. This does not allow for a full denial of service.

Vendor

Product

CWE

CWE-1050

Yayın Tarihi

2025-04-14 14:15:24

Güncelleme

2025-05-29 07:15:24

Source Identifier

secalert@redhat.com

KEV Date Added

Kategoriler

CWE-1050 MEDIUM 2025

Referanslar

https://access.redhat.com/errata/RHSA-2025:4439 https://access.redhat.com/errata/RHSA-2025:4440 https://access.redhat.com/errata/RHSA-2025:4508 https://access.redhat.com/errata/RHSA-2025:7436 https://access.redhat.com/errata/RHSA-2025:8128 https://access.redhat.com/errata/RHSA-2025:8292 https://access.redhat.com/security/cve/CVE-2025-32907 https://bugzilla.redhat.com/show_bug.cgi?id=2359342