Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/libsoup2.4@2.48.0-1%2Bdeb8u1
purl pkg:deb/debian/libsoup2.4@2.48.0-1%2Bdeb8u1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.5
Vulnerabilities affecting this package (21)
Vulnerability Summary Fixed by
VCID-24tr-cene-gfch
Aliases:
CVE-2025-32911
libsoup: Double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" GHashTable value
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-2fpq-q21y-83a7
Aliases:
CVE-2017-2885
A vulnerability in libsoup might allow remote attackers to execute arbitrary code.
2.56.0-2+deb9u2
Affected by 21 other vulnerabilities.
2.64.2-2
Affected by 19 other vulnerabilities.
VCID-4m39-v7d7-1ba7
Aliases:
CVE-2025-32050
libsoup: Integer overflow in append_param_quoted
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-6skx-v6sg-53gq
Aliases:
CVE-2025-2784
libsoup: Heap buffer over-read in `skip_insignificant_space` when sniffing content
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-7hhg-3u9v-nqfw
Aliases:
CVE-2025-4945
libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-9uua-rxjd-fkf6
Aliases:
CVE-2025-4969
libsoup: Off-by-One Out-of-Bounds Read in find_boundary() in soup-multipart.c
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-9vuw-57ex-k7ez
Aliases:
CVE-2018-12910
security update
2.56.0-2+deb9u2
Affected by 21 other vulnerabilities.
2.64.2-2
Affected by 19 other vulnerabilities.
VCID-athp-xk5g-jbhu
Aliases:
CVE-2025-32909
libsoup: NULL Pointer Dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-f481-8mb7-dbed
Aliases:
CVE-2025-32910
libsoup: Null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an Unauthorized response with Digest authentication
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-fwhq-2jj5-wka3
Aliases:
CVE-2019-17266
libsoup: heap-based over-read in soup_ntlm_parse_challenge() in soup-auth-ntlm.c
2.72.0-2
Affected by 19 other vulnerabilities.
VCID-k9bu-zasm-vfgr
Aliases:
CVE-2025-32912
libsoup: NULL pointer dereference in client when server omits the "nonce" parameter in an Unauthorized response with Digest authentication
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-ku6w-4wsv-qbe4
Aliases:
CVE-2025-32906
libsoup: Out of bounds reads in soup_headers_parse_request()
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-rd74-1427-eybf
Aliases:
CVE-2025-4948
libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-sabm-gujq-j3fb
Aliases:
CVE-2025-4476
libsoup: Null pointer dereference in libsoup may lead to Denial Of Service
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-svba-hf1d-y7ez
Aliases:
CVE-2024-52530
libsoup: HTTP request smuggling via stripping null bytes from the ends of header names
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-uk2y-997k-4qat
Aliases:
CVE-2024-52531
libsoup: buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-v9pv-qh9a-97g9
Aliases:
CVE-2024-52532
libsoup: infinite loop while reading websocket data
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-yx68-81fu-ffar
Aliases:
CVE-2025-32914
libsoup: OOB Read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-zhp7-2ks9-m7es
Aliases:
CVE-2025-32913
libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in Content-Disposition header
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-zrmu-bwfg-e3hp
Aliases:
CVE-2025-32052
libsoup: Heap buffer overflow in sniff_unknown()
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-zsdd-pzyb-nbdf
Aliases:
CVE-2025-32053
libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-2fpq-q21y-83a7 A vulnerability in libsoup might allow remote attackers to execute arbitrary code. CVE-2017-2885

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T00:42:11.809027+00:00 Debian Oval Importer Affected by VCID-k9bu-zasm-vfgr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-16T00:00:27.139736+00:00 Debian Oval Importer Affected by VCID-yx68-81fu-ffar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T23:30:01.442050+00:00 Debian Oval Importer Affected by VCID-uk2y-997k-4qat https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T22:54:06.840226+00:00 Debian Oval Importer Affected by VCID-f481-8mb7-dbed https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:44:30.869438+00:00 Debian Oval Importer Affected by VCID-v9pv-qh9a-97g9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:29:12.655559+00:00 Debian Oval Importer Affected by VCID-zsdd-pzyb-nbdf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:21:04.198667+00:00 Debian Oval Importer Affected by VCID-4m39-v7d7-1ba7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T20:48:10.680604+00:00 Debian Oval Importer Affected by VCID-ku6w-4wsv-qbe4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T20:16:34.868760+00:00 Debian Oval Importer Affected by VCID-6skx-v6sg-53gq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:16:58.538684+00:00 Debian Oval Importer Affected by VCID-9uua-rxjd-fkf6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:10:02.539585+00:00 Debian Oval Importer Affected by VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:03:06.312916+00:00 Debian Oval Importer Affected by VCID-fwhq-2jj5-wka3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:01:46.994586+00:00 Debian Oval Importer Affected by VCID-zrmu-bwfg-e3hp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T18:22:41.110362+00:00 Debian Oval Importer Affected by VCID-svba-hf1d-y7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T18:15:00.172397+00:00 Debian Oval Importer Affected by VCID-zhp7-2ks9-m7es https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:43:59.950828+00:00 Debian Oval Importer Affected by VCID-7hhg-3u9v-nqfw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:33:43.405462+00:00 Debian Oval Importer Affected by VCID-sabm-gujq-j3fb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:12:41.331653+00:00 Debian Oval Importer Affected by VCID-athp-xk5g-jbhu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T16:20:21.690431+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T16:09:25.561989+00:00 Debian Oval Importer Affected by VCID-24tr-cene-gfch https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T15:52:34.907072+00:00 Debian Oval Importer Affected by VCID-rd74-1427-eybf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T14:23:23.026856+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.4.0
2026-04-15T14:17:19.814041+00:00 Debian Oval Importer Affected by VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.4.0
2026-04-15T13:37:48.063977+00:00 Debian Oval Importer Fixing VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 38.4.0
2026-04-12T00:14:59.774601+00:00 Debian Oval Importer Affected by VCID-k9bu-zasm-vfgr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:34:37.186183+00:00 Debian Oval Importer Affected by VCID-yx68-81fu-ffar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:05:18.750245+00:00 Debian Oval Importer Affected by VCID-uk2y-997k-4qat https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T22:30:35.186039+00:00 Debian Oval Importer Affected by VCID-f481-8mb7-dbed https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:23:12.341806+00:00 Debian Oval Importer Affected by VCID-v9pv-qh9a-97g9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:08:23.348810+00:00 Debian Oval Importer Affected by VCID-zsdd-pzyb-nbdf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:00:37.560978+00:00 Debian Oval Importer Affected by VCID-4m39-v7d7-1ba7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T20:29:03.187081+00:00 Debian Oval Importer Affected by VCID-ku6w-4wsv-qbe4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T19:58:21.076615+00:00 Debian Oval Importer Affected by VCID-6skx-v6sg-53gq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T19:00:24.241317+00:00 Debian Oval Importer Affected by VCID-9uua-rxjd-fkf6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:53:43.483294+00:00 Debian Oval Importer Affected by VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:47:06.524629+00:00 Debian Oval Importer Affected by VCID-fwhq-2jj5-wka3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:45:50.461852+00:00 Debian Oval Importer Affected by VCID-zrmu-bwfg-e3hp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:07:49.796125+00:00 Debian Oval Importer Affected by VCID-svba-hf1d-y7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:00:26.281653+00:00 Debian Oval Importer Affected by VCID-zhp7-2ks9-m7es https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:30:02.701681+00:00 Debian Oval Importer Affected by VCID-7hhg-3u9v-nqfw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:20:03.342272+00:00 Debian Oval Importer Affected by VCID-sabm-gujq-j3fb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:59:18.428675+00:00 Debian Oval Importer Affected by VCID-athp-xk5g-jbhu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:07:40.475673+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T15:56:55.611494+00:00 Debian Oval Importer Affected by VCID-24tr-cene-gfch https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T15:40:11.917292+00:00 Debian Oval Importer Affected by VCID-rd74-1427-eybf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T14:11:43.853097+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.3.0
2026-04-11T14:05:50.558363+00:00 Debian Oval Importer Affected by VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.3.0
2026-04-11T13:26:31.496163+00:00 Debian Oval Importer Fixing VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 38.3.0
2026-04-08T23:45:57.892923+00:00 Debian Oval Importer Affected by VCID-k9bu-zasm-vfgr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T23:07:19.220168+00:00 Debian Oval Importer Affected by VCID-yx68-81fu-ffar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T22:39:04.540163+00:00 Debian Oval Importer Affected by VCID-uk2y-997k-4qat https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T22:06:11.645299+00:00 Debian Oval Importer Affected by VCID-f481-8mb7-dbed https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T21:01:49.645711+00:00 Debian Oval Importer Affected by VCID-v9pv-qh9a-97g9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:47:27.230373+00:00 Debian Oval Importer Affected by VCID-zsdd-pzyb-nbdf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:39:52.457709+00:00 Debian Oval Importer Affected by VCID-4m39-v7d7-1ba7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:09:24.329017+00:00 Debian Oval Importer Affected by VCID-ku6w-4wsv-qbe4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T19:40:11.165906+00:00 Debian Oval Importer Affected by VCID-6skx-v6sg-53gq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:44:55.067540+00:00 Debian Oval Importer Affected by VCID-9uua-rxjd-fkf6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:38:27.337783+00:00 Debian Oval Importer Affected by VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:32:05.938626+00:00 Debian Oval Importer Affected by VCID-fwhq-2jj5-wka3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:30:52.126334+00:00 Debian Oval Importer Affected by VCID-zrmu-bwfg-e3hp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:54:16.073782+00:00 Debian Oval Importer Affected by VCID-svba-hf1d-y7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:47:04.453562+00:00 Debian Oval Importer Affected by VCID-zhp7-2ks9-m7es https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:18:00.077069+00:00 Debian Oval Importer Affected by VCID-7hhg-3u9v-nqfw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:08:30.574094+00:00 Debian Oval Importer Affected by VCID-sabm-gujq-j3fb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:48:49.576562+00:00 Debian Oval Importer Affected by VCID-athp-xk5g-jbhu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:00:19.696428+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:50:05.243398+00:00 Debian Oval Importer Affected by VCID-24tr-cene-gfch https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:34:05.758024+00:00 Debian Oval Importer Affected by VCID-rd74-1427-eybf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-07T22:45:40.621349+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.1.0
2026-04-07T22:39:52.430714+00:00 Debian Oval Importer Affected by VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.1.0
2026-04-07T22:02:20.010640+00:00 Debian Oval Importer Fixing VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 38.1.0