Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/libsoup2.4@2.4.1-2%2Blenny1
purl pkg:deb/debian/libsoup2.4@2.4.1-2%2Blenny1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.5
Vulnerabilities affecting this package (22)
Vulnerability Summary Fixed by
VCID-24tr-cene-gfch
Aliases:
CVE-2025-32911
libsoup: Double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" GHashTable value
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-2fpq-q21y-83a7
Aliases:
CVE-2017-2885
A vulnerability in libsoup might allow remote attackers to execute arbitrary code.
2.48.0-1+deb8u1
Affected by 21 other vulnerabilities.
2.56.0-2+deb9u2
Affected by 21 other vulnerabilities.
2.64.2-2
Affected by 19 other vulnerabilities.
VCID-4m39-v7d7-1ba7
Aliases:
CVE-2025-32050
libsoup: Integer overflow in append_param_quoted
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-6skx-v6sg-53gq
Aliases:
CVE-2025-2784
libsoup: Heap buffer over-read in `skip_insignificant_space` when sniffing content
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-7hhg-3u9v-nqfw
Aliases:
CVE-2025-4945
libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-9uua-rxjd-fkf6
Aliases:
CVE-2025-4969
libsoup: Off-by-One Out-of-Bounds Read in find_boundary() in soup-multipart.c
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-9vuw-57ex-k7ez
Aliases:
CVE-2018-12910
security update
2.56.0-2+deb9u2
Affected by 21 other vulnerabilities.
2.64.2-2
Affected by 19 other vulnerabilities.
VCID-athp-xk5g-jbhu
Aliases:
CVE-2025-32909
libsoup: NULL Pointer Dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-f481-8mb7-dbed
Aliases:
CVE-2025-32910
libsoup: Null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an Unauthorized response with Digest authentication
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-fwhq-2jj5-wka3
Aliases:
CVE-2019-17266
libsoup: heap-based over-read in soup_ntlm_parse_challenge() in soup-auth-ntlm.c
2.72.0-2
Affected by 19 other vulnerabilities.
VCID-k9bu-zasm-vfgr
Aliases:
CVE-2025-32912
libsoup: NULL pointer dereference in client when server omits the "nonce" parameter in an Unauthorized response with Digest authentication
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-ku6w-4wsv-qbe4
Aliases:
CVE-2025-32906
libsoup: Out of bounds reads in soup_headers_parse_request()
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-qfjx-uc2n-3yde
Aliases:
CVE-2011-2524
This GLSA contains notification of vulnerabilities found in several Gentoo packages which have been fixed prior to January 1, 2012. The worst of these vulnerabilities could lead to local privilege escalation and remote code execution. Please see the package list and CVE identifiers below for more information.
2.38.1-3
Affected by 21 other vulnerabilities.
VCID-rd74-1427-eybf
Aliases:
CVE-2025-4948
libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-sabm-gujq-j3fb
Aliases:
CVE-2025-4476
libsoup: Null pointer dereference in libsoup may lead to Denial Of Service
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-svba-hf1d-y7ez
Aliases:
CVE-2024-52530
libsoup: HTTP request smuggling via stripping null bytes from the ends of header names
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-uk2y-997k-4qat
Aliases:
CVE-2024-52531
libsoup: buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-v9pv-qh9a-97g9
Aliases:
CVE-2024-52532
libsoup: infinite loop while reading websocket data
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-yx68-81fu-ffar
Aliases:
CVE-2025-32914
libsoup: OOB Read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-zhp7-2ks9-m7es
Aliases:
CVE-2025-32913
libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in Content-Disposition header
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-zrmu-bwfg-e3hp
Aliases:
CVE-2025-32052
libsoup: Heap buffer overflow in sniff_unknown()
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-zsdd-pzyb-nbdf
Aliases:
CVE-2025-32053
libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T00:42:11.794528+00:00 Debian Oval Importer Affected by VCID-k9bu-zasm-vfgr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-16T00:00:27.122771+00:00 Debian Oval Importer Affected by VCID-yx68-81fu-ffar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T23:30:01.427047+00:00 Debian Oval Importer Affected by VCID-uk2y-997k-4qat https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T22:54:06.825689+00:00 Debian Oval Importer Affected by VCID-f481-8mb7-dbed https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:44:30.853112+00:00 Debian Oval Importer Affected by VCID-v9pv-qh9a-97g9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:29:12.636852+00:00 Debian Oval Importer Affected by VCID-zsdd-pzyb-nbdf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:21:04.182426+00:00 Debian Oval Importer Affected by VCID-4m39-v7d7-1ba7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T20:48:10.665617+00:00 Debian Oval Importer Affected by VCID-ku6w-4wsv-qbe4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T20:16:34.852405+00:00 Debian Oval Importer Affected by VCID-6skx-v6sg-53gq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:16:58.523935+00:00 Debian Oval Importer Affected by VCID-9uua-rxjd-fkf6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:10:02.523351+00:00 Debian Oval Importer Affected by VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:03:06.296752+00:00 Debian Oval Importer Affected by VCID-fwhq-2jj5-wka3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:01:46.980021+00:00 Debian Oval Importer Affected by VCID-zrmu-bwfg-e3hp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T18:22:41.094136+00:00 Debian Oval Importer Affected by VCID-svba-hf1d-y7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T18:15:00.156587+00:00 Debian Oval Importer Affected by VCID-zhp7-2ks9-m7es https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:43:59.935669+00:00 Debian Oval Importer Affected by VCID-7hhg-3u9v-nqfw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:33:43.390429+00:00 Debian Oval Importer Affected by VCID-sabm-gujq-j3fb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:12:41.318391+00:00 Debian Oval Importer Affected by VCID-athp-xk5g-jbhu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T16:20:21.676038+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T16:09:25.547175+00:00 Debian Oval Importer Affected by VCID-24tr-cene-gfch https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T15:52:34.893154+00:00 Debian Oval Importer Affected by VCID-rd74-1427-eybf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T15:26:24.004198+00:00 Debian Oval Importer Affected by VCID-qfjx-uc2n-3yde https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T14:23:23.013047+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.4.0
2026-04-15T14:17:19.800105+00:00 Debian Oval Importer Affected by VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.4.0
2026-04-15T13:37:48.050565+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 38.4.0
2026-04-12T00:14:59.766270+00:00 Debian Oval Importer Affected by VCID-k9bu-zasm-vfgr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:34:37.170961+00:00 Debian Oval Importer Affected by VCID-yx68-81fu-ffar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:05:18.733555+00:00 Debian Oval Importer Affected by VCID-uk2y-997k-4qat https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T22:30:35.171583+00:00 Debian Oval Importer Affected by VCID-f481-8mb7-dbed https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:23:12.325689+00:00 Debian Oval Importer Affected by VCID-v9pv-qh9a-97g9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:08:23.334242+00:00 Debian Oval Importer Affected by VCID-zsdd-pzyb-nbdf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:00:37.544439+00:00 Debian Oval Importer Affected by VCID-4m39-v7d7-1ba7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T20:29:03.167894+00:00 Debian Oval Importer Affected by VCID-ku6w-4wsv-qbe4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T19:58:21.054984+00:00 Debian Oval Importer Affected by VCID-6skx-v6sg-53gq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T19:00:24.224223+00:00 Debian Oval Importer Affected by VCID-9uua-rxjd-fkf6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:53:43.468484+00:00 Debian Oval Importer Affected by VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:47:06.509768+00:00 Debian Oval Importer Affected by VCID-fwhq-2jj5-wka3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:45:50.446230+00:00 Debian Oval Importer Affected by VCID-zrmu-bwfg-e3hp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:07:49.780639+00:00 Debian Oval Importer Affected by VCID-svba-hf1d-y7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:00:26.264410+00:00 Debian Oval Importer Affected by VCID-zhp7-2ks9-m7es https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:30:02.683168+00:00 Debian Oval Importer Affected by VCID-7hhg-3u9v-nqfw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:20:03.325840+00:00 Debian Oval Importer Affected by VCID-sabm-gujq-j3fb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:59:18.413394+00:00 Debian Oval Importer Affected by VCID-athp-xk5g-jbhu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:07:40.456218+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T15:56:55.592260+00:00 Debian Oval Importer Affected by VCID-24tr-cene-gfch https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T15:40:11.900668+00:00 Debian Oval Importer Affected by VCID-rd74-1427-eybf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T15:14:32.901068+00:00 Debian Oval Importer Affected by VCID-qfjx-uc2n-3yde https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T14:11:43.835750+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.3.0
2026-04-11T14:05:50.540774+00:00 Debian Oval Importer Affected by VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.3.0
2026-04-11T13:26:31.480358+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 38.3.0
2026-04-08T23:45:57.875756+00:00 Debian Oval Importer Affected by VCID-k9bu-zasm-vfgr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T23:07:19.200880+00:00 Debian Oval Importer Affected by VCID-yx68-81fu-ffar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T22:39:04.522857+00:00 Debian Oval Importer Affected by VCID-uk2y-997k-4qat https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T22:06:11.628489+00:00 Debian Oval Importer Affected by VCID-f481-8mb7-dbed https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T21:01:49.628088+00:00 Debian Oval Importer Affected by VCID-v9pv-qh9a-97g9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:47:27.209969+00:00 Debian Oval Importer Affected by VCID-zsdd-pzyb-nbdf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:39:52.430489+00:00 Debian Oval Importer Affected by VCID-4m39-v7d7-1ba7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:09:24.312040+00:00 Debian Oval Importer Affected by VCID-ku6w-4wsv-qbe4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T19:40:11.148500+00:00 Debian Oval Importer Affected by VCID-6skx-v6sg-53gq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:44:55.051041+00:00 Debian Oval Importer Affected by VCID-9uua-rxjd-fkf6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:38:27.321882+00:00 Debian Oval Importer Affected by VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:32:05.920452+00:00 Debian Oval Importer Affected by VCID-fwhq-2jj5-wka3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:30:52.108481+00:00 Debian Oval Importer Affected by VCID-zrmu-bwfg-e3hp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:54:16.049490+00:00 Debian Oval Importer Affected by VCID-svba-hf1d-y7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:47:04.436012+00:00 Debian Oval Importer Affected by VCID-zhp7-2ks9-m7es https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:18:00.056778+00:00 Debian Oval Importer Affected by VCID-7hhg-3u9v-nqfw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:08:30.554543+00:00 Debian Oval Importer Affected by VCID-sabm-gujq-j3fb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:48:49.552189+00:00 Debian Oval Importer Affected by VCID-athp-xk5g-jbhu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:00:19.681082+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:50:05.220615+00:00 Debian Oval Importer Affected by VCID-24tr-cene-gfch https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:34:05.739881+00:00 Debian Oval Importer Affected by VCID-rd74-1427-eybf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:09:24.569105+00:00 Debian Oval Importer Affected by VCID-qfjx-uc2n-3yde https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-07T22:45:40.604339+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.1.0
2026-04-07T22:39:52.423327+00:00 Debian Oval Importer Affected by VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.1.0
2026-04-07T22:02:19.988257+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 38.1.0