CVE-2026-2436 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A flaw was found in libsoup's SoupServer. A remote attacker could exploit a use-after-free vulnerability where the `soup_server_disconnect()` function frees con…
Medium CVSS: 6.5

CVE-2026-2436

A flaw was found in libsoup's SoupServer. A remote attacker could exploit a use-after-free vulnerability where the `soup_server_disconnect()` function frees connection objects prematurely, even if a TLS handshake is still pending. If the handshake completes after the connection object has been freed, a dangling pointer is accessed, leading to a server crash and a Denial of Service.
Vendor
-
Product
-
CWE
CWE-825
Yayın Tarihi
2026-03-26 20:16:11
Güncelleme
2026-03-30 13:26:50
Source Identifier
secalert@redhat.com
KEV Date Added
-

Kategoriler

Referanslar