Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/libsoup2.4@2.48.0-1
purl pkg:deb/debian/libsoup2.4@2.48.0-1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.5
Vulnerabilities affecting this package (21)
Vulnerability Summary Fixed by
VCID-24tr-cene-gfch
Aliases:
CVE-2025-32911
libsoup: Double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" GHashTable value
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-2fpq-q21y-83a7
Aliases:
CVE-2017-2885
A vulnerability in libsoup might allow remote attackers to execute arbitrary code.
2.48.0-1+deb8u1
Affected by 21 other vulnerabilities.
2.56.0-2+deb9u2
Affected by 21 other vulnerabilities.
2.64.2-2
Affected by 19 other vulnerabilities.
VCID-4m39-v7d7-1ba7
Aliases:
CVE-2025-32050
libsoup: Integer overflow in append_param_quoted
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-6skx-v6sg-53gq
Aliases:
CVE-2025-2784
libsoup: Heap buffer over-read in `skip_insignificant_space` when sniffing content
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-7hhg-3u9v-nqfw
Aliases:
CVE-2025-4945
libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-9uua-rxjd-fkf6
Aliases:
CVE-2025-4969
libsoup: Off-by-One Out-of-Bounds Read in find_boundary() in soup-multipart.c
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-9vuw-57ex-k7ez
Aliases:
CVE-2018-12910
security update
2.56.0-2+deb9u2
Affected by 21 other vulnerabilities.
2.64.2-2
Affected by 19 other vulnerabilities.
VCID-athp-xk5g-jbhu
Aliases:
CVE-2025-32909
libsoup: NULL Pointer Dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-f481-8mb7-dbed
Aliases:
CVE-2025-32910
libsoup: Null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an Unauthorized response with Digest authentication
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-fwhq-2jj5-wka3
Aliases:
CVE-2019-17266
libsoup: heap-based over-read in soup_ntlm_parse_challenge() in soup-auth-ntlm.c
2.72.0-2
Affected by 19 other vulnerabilities.
VCID-k9bu-zasm-vfgr
Aliases:
CVE-2025-32912
libsoup: NULL pointer dereference in client when server omits the "nonce" parameter in an Unauthorized response with Digest authentication
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-ku6w-4wsv-qbe4
Aliases:
CVE-2025-32906
libsoup: Out of bounds reads in soup_headers_parse_request()
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-rd74-1427-eybf
Aliases:
CVE-2025-4948
libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-sabm-gujq-j3fb
Aliases:
CVE-2025-4476
libsoup: Null pointer dereference in libsoup may lead to Denial Of Service
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-svba-hf1d-y7ez
Aliases:
CVE-2024-52530
libsoup: HTTP request smuggling via stripping null bytes from the ends of header names
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-uk2y-997k-4qat
Aliases:
CVE-2024-52531
libsoup: buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-v9pv-qh9a-97g9
Aliases:
CVE-2024-52532
libsoup: infinite loop while reading websocket data
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-yx68-81fu-ffar
Aliases:
CVE-2025-32914
libsoup: OOB Read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-zhp7-2ks9-m7es
Aliases:
CVE-2025-32913
libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in Content-Disposition header
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-zrmu-bwfg-e3hp
Aliases:
CVE-2025-32052
libsoup: Heap buffer overflow in sniff_unknown()
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-zsdd-pzyb-nbdf
Aliases:
CVE-2025-32053
libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T00:42:11.805557+00:00 Debian Oval Importer Affected by VCID-k9bu-zasm-vfgr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-16T00:00:27.136372+00:00 Debian Oval Importer Affected by VCID-yx68-81fu-ffar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T23:30:01.438333+00:00 Debian Oval Importer Affected by VCID-uk2y-997k-4qat https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T22:54:06.836602+00:00 Debian Oval Importer Affected by VCID-f481-8mb7-dbed https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:44:30.865360+00:00 Debian Oval Importer Affected by VCID-v9pv-qh9a-97g9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:29:12.651852+00:00 Debian Oval Importer Affected by VCID-zsdd-pzyb-nbdf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:21:04.194605+00:00 Debian Oval Importer Affected by VCID-4m39-v7d7-1ba7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T20:48:10.676897+00:00 Debian Oval Importer Affected by VCID-ku6w-4wsv-qbe4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T20:16:34.864633+00:00 Debian Oval Importer Affected by VCID-6skx-v6sg-53gq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:16:58.535018+00:00 Debian Oval Importer Affected by VCID-9uua-rxjd-fkf6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:10:02.535575+00:00 Debian Oval Importer Affected by VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:03:06.308904+00:00 Debian Oval Importer Affected by VCID-fwhq-2jj5-wka3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:01:46.990950+00:00 Debian Oval Importer Affected by VCID-zrmu-bwfg-e3hp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T18:22:41.106303+00:00 Debian Oval Importer Affected by VCID-svba-hf1d-y7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T18:15:00.168441+00:00 Debian Oval Importer Affected by VCID-zhp7-2ks9-m7es https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:43:59.946987+00:00 Debian Oval Importer Affected by VCID-7hhg-3u9v-nqfw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:33:43.401643+00:00 Debian Oval Importer Affected by VCID-sabm-gujq-j3fb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:12:41.328427+00:00 Debian Oval Importer Affected by VCID-athp-xk5g-jbhu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T16:20:21.686820+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T16:09:25.558177+00:00 Debian Oval Importer Affected by VCID-24tr-cene-gfch https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T15:52:34.903652+00:00 Debian Oval Importer Affected by VCID-rd74-1427-eybf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T14:23:23.023452+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.4.0
2026-04-15T14:17:19.810581+00:00 Debian Oval Importer Affected by VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.4.0
2026-04-15T13:37:48.060690+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 38.4.0
2026-04-12T00:14:59.772560+00:00 Debian Oval Importer Affected by VCID-k9bu-zasm-vfgr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:34:37.182251+00:00 Debian Oval Importer Affected by VCID-yx68-81fu-ffar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:05:18.746149+00:00 Debian Oval Importer Affected by VCID-uk2y-997k-4qat https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T22:30:35.182411+00:00 Debian Oval Importer Affected by VCID-f481-8mb7-dbed https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:23:12.337834+00:00 Debian Oval Importer Affected by VCID-v9pv-qh9a-97g9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:08:23.345233+00:00 Debian Oval Importer Affected by VCID-zsdd-pzyb-nbdf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:00:37.556275+00:00 Debian Oval Importer Affected by VCID-4m39-v7d7-1ba7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T20:29:03.182688+00:00 Debian Oval Importer Affected by VCID-ku6w-4wsv-qbe4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T19:58:21.071187+00:00 Debian Oval Importer Affected by VCID-6skx-v6sg-53gq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T19:00:24.237105+00:00 Debian Oval Importer Affected by VCID-9uua-rxjd-fkf6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:53:43.479507+00:00 Debian Oval Importer Affected by VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:47:06.520941+00:00 Debian Oval Importer Affected by VCID-fwhq-2jj5-wka3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:45:50.458038+00:00 Debian Oval Importer Affected by VCID-zrmu-bwfg-e3hp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:07:49.791881+00:00 Debian Oval Importer Affected by VCID-svba-hf1d-y7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:00:26.277481+00:00 Debian Oval Importer Affected by VCID-zhp7-2ks9-m7es https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:30:02.697228+00:00 Debian Oval Importer Affected by VCID-7hhg-3u9v-nqfw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:20:03.338246+00:00 Debian Oval Importer Affected by VCID-sabm-gujq-j3fb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:59:18.424848+00:00 Debian Oval Importer Affected by VCID-athp-xk5g-jbhu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:07:40.470734+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T15:56:55.606045+00:00 Debian Oval Importer Affected by VCID-24tr-cene-gfch https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T15:40:11.913100+00:00 Debian Oval Importer Affected by VCID-rd74-1427-eybf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T14:11:43.849196+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.3.0
2026-04-11T14:05:50.554018+00:00 Debian Oval Importer Affected by VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.3.0
2026-04-11T13:26:31.492271+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 38.3.0
2026-04-08T23:45:57.888810+00:00 Debian Oval Importer Affected by VCID-k9bu-zasm-vfgr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T23:07:19.215446+00:00 Debian Oval Importer Affected by VCID-yx68-81fu-ffar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T22:39:04.535782+00:00 Debian Oval Importer Affected by VCID-uk2y-997k-4qat https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T22:06:11.640841+00:00 Debian Oval Importer Affected by VCID-f481-8mb7-dbed https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T21:01:49.641266+00:00 Debian Oval Importer Affected by VCID-v9pv-qh9a-97g9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:47:27.225928+00:00 Debian Oval Importer Affected by VCID-zsdd-pzyb-nbdf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:39:52.450442+00:00 Debian Oval Importer Affected by VCID-4m39-v7d7-1ba7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:09:24.324700+00:00 Debian Oval Importer Affected by VCID-ku6w-4wsv-qbe4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T19:40:11.161640+00:00 Debian Oval Importer Affected by VCID-6skx-v6sg-53gq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:44:55.063476+00:00 Debian Oval Importer Affected by VCID-9uua-rxjd-fkf6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:38:27.333696+00:00 Debian Oval Importer Affected by VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:32:05.934149+00:00 Debian Oval Importer Affected by VCID-fwhq-2jj5-wka3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:30:52.121884+00:00 Debian Oval Importer Affected by VCID-zrmu-bwfg-e3hp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:54:16.069428+00:00 Debian Oval Importer Affected by VCID-svba-hf1d-y7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:47:04.449140+00:00 Debian Oval Importer Affected by VCID-zhp7-2ks9-m7es https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:18:00.072621+00:00 Debian Oval Importer Affected by VCID-7hhg-3u9v-nqfw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:08:30.569417+00:00 Debian Oval Importer Affected by VCID-sabm-gujq-j3fb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:48:49.572327+00:00 Debian Oval Importer Affected by VCID-athp-xk5g-jbhu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:00:19.692448+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:50:05.234590+00:00 Debian Oval Importer Affected by VCID-24tr-cene-gfch https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:34:05.753537+00:00 Debian Oval Importer Affected by VCID-rd74-1427-eybf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-07T22:45:40.616731+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.1.0
2026-04-07T22:39:52.429067+00:00 Debian Oval Importer Affected by VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.1.0
2026-04-07T22:02:20.004854+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 38.1.0