CVE-2026-2436
A flaw was found in libsoup's SoupServer. A remote attacker could exploit a use-after-free vulnerability where the `soup_server_disconnect()` function frees connection objects prematurely, even if a TLS handshake is still pending. If the handshake completes after the connection object has been freed, a dangling pointer is accessed, leading to a server crash and a Denial of Service.
Vendor
-
Product
-
CWE
Yayın Tarihi
2026-03-26 20:16:11
Güncelleme
2026-03-30 13:26:50
Source Identifier
secalert@redhat.com
KEV Date Added
-