A flaw was found in libsoup. The libsoup append_param_quoted() function may contain an overflow bug resulting in a buffer under-read.
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations prior to the targeted buffer.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Red Hat Enterprise Linux 8 | RedHat | libsoup-0:2.62.3-8.el8_10 | * |
| Red Hat Enterprise Linux 8 | RedHat | libsoup-0:2.62.3-8.el8_10 | * |
| Red Hat Enterprise Linux 8.8 Extended Update Support | RedHat | libsoup-0:2.62.3-3.el8_8.4 | * |
| Red Hat Enterprise Linux 9.2 Extended Update Support | RedHat | libsoup-0:2.72.0-8.el9_2.4 | * |
| Red Hat Enterprise Linux 9.4 Extended Update Support | RedHat | libsoup-0:2.72.0-8.el9_4.4 | * |
| Libsoup2.4 | Ubuntu | focal | * |
| Libsoup2.4 | Ubuntu | jammy | * |
| Libsoup2.4 | Ubuntu | noble | * |
| Libsoup2.4 | Ubuntu | oracular | * |
| Libsoup2.4 | Ubuntu | upstream | * |
| Libsoup3 | Ubuntu | esm-apps/jammy | * |
| Libsoup3 | Ubuntu | jammy | * |
| Libsoup3 | Ubuntu | noble | * |
| Libsoup3 | Ubuntu | oracular | * |
| Libsoup3 | Ubuntu | upstream | * |