CVE Vulnerabilities

CVE-2024-52532

Loop with Unreachable Exit Condition ('Infinite Loop')

Published: Nov 11, 2024 | Modified: Nov 12, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
7.5 MODERATE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM

GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients.

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Software

Name Vendor Start Version End Version
Red Hat Enterprise Linux 8 RedHat libsoup-0:2.62.3-6.el8_10 *
Red Hat Enterprise Linux 8 RedHat libsoup-0:2.62.3-6.el8_10 *
Red Hat Enterprise Linux 9 RedHat libsoup-0:2.72.0-8.el9_5.2 *
Libsoup2.4 Ubuntu devel *
Libsoup2.4 Ubuntu esm-infra/bionic *
Libsoup2.4 Ubuntu focal *
Libsoup2.4 Ubuntu jammy *
Libsoup2.4 Ubuntu noble *
Libsoup2.4 Ubuntu oracular *
Libsoup3 Ubuntu esm-apps/jammy *
Libsoup3 Ubuntu noble *
Libsoup3 Ubuntu oracular *
Libsoup3 Ubuntu upstream *

References