A flaw was found in libsoup, where SoupAuthDigest is vulnerable to a NULL pointer dereference. The HTTP server may cause the libsoup client to crash.
The product dereferences a pointer that it expects to be valid but is NULL.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | RedHat | libsoup3-0:3.6.5-3.el10_0 | * |
| Libsoup2.4 | Ubuntu | esm-infra/bionic | * |
| Libsoup2.4 | Ubuntu | esm-infra/focal | * |
| Libsoup2.4 | Ubuntu | esm-infra/xenial | * |
| Libsoup2.4 | Ubuntu | focal | * |
| Libsoup2.4 | Ubuntu | jammy | * |
| Libsoup2.4 | Ubuntu | noble | * |
| Libsoup2.4 | Ubuntu | oracular | * |
| Libsoup2.4 | Ubuntu | plucky | * |
| Libsoup2.4 | Ubuntu | upstream | * |
| Libsoup3 | Ubuntu | esm-apps/jammy | * |
| Libsoup3 | Ubuntu | jammy | * |
| Libsoup3 | Ubuntu | noble | * |
| Libsoup3 | Ubuntu | oracular | * |
| Libsoup3 | Ubuntu | upstream | * |