Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/libsoup2.4@2.56.0-2%2Bdeb9u2
purl pkg:deb/debian/libsoup2.4@2.56.0-2%2Bdeb9u2
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.5
Vulnerabilities affecting this package (21)
Vulnerability Summary Fixed by
VCID-24tr-cene-gfch
Aliases:
CVE-2025-32911
libsoup: Double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" GHashTable value
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-2fpq-q21y-83a7
Aliases:
CVE-2017-2885
A vulnerability in libsoup might allow remote attackers to execute arbitrary code.
2.64.2-2
Affected by 19 other vulnerabilities.
VCID-4m39-v7d7-1ba7
Aliases:
CVE-2025-32050
libsoup: Integer overflow in append_param_quoted
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-6skx-v6sg-53gq
Aliases:
CVE-2025-2784
libsoup: Heap buffer over-read in `skip_insignificant_space` when sniffing content
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-7hhg-3u9v-nqfw
Aliases:
CVE-2025-4945
libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-9uua-rxjd-fkf6
Aliases:
CVE-2025-4969
libsoup: Off-by-One Out-of-Bounds Read in find_boundary() in soup-multipart.c
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-9vuw-57ex-k7ez
Aliases:
CVE-2018-12910
security update
2.64.2-2
Affected by 19 other vulnerabilities.
VCID-athp-xk5g-jbhu
Aliases:
CVE-2025-32909
libsoup: NULL Pointer Dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-f481-8mb7-dbed
Aliases:
CVE-2025-32910
libsoup: Null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an Unauthorized response with Digest authentication
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-fwhq-2jj5-wka3
Aliases:
CVE-2019-17266
libsoup: heap-based over-read in soup_ntlm_parse_challenge() in soup-auth-ntlm.c
2.72.0-2
Affected by 19 other vulnerabilities.
VCID-k9bu-zasm-vfgr
Aliases:
CVE-2025-32912
libsoup: NULL pointer dereference in client when server omits the "nonce" parameter in an Unauthorized response with Digest authentication
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-ku6w-4wsv-qbe4
Aliases:
CVE-2025-32906
libsoup: Out of bounds reads in soup_headers_parse_request()
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-rd74-1427-eybf
Aliases:
CVE-2025-4948
libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-sabm-gujq-j3fb
Aliases:
CVE-2025-4476
libsoup: Null pointer dereference in libsoup may lead to Denial Of Service
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-svba-hf1d-y7ez
Aliases:
CVE-2024-52530
libsoup: HTTP request smuggling via stripping null bytes from the ends of header names
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-uk2y-997k-4qat
Aliases:
CVE-2024-52531
libsoup: buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-v9pv-qh9a-97g9
Aliases:
CVE-2024-52532
libsoup: infinite loop while reading websocket data
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-yx68-81fu-ffar
Aliases:
CVE-2025-32914
libsoup: OOB Read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-zhp7-2ks9-m7es
Aliases:
CVE-2025-32913
libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in Content-Disposition header
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-zrmu-bwfg-e3hp
Aliases:
CVE-2025-32052
libsoup: Heap buffer overflow in sniff_unknown()
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-zsdd-pzyb-nbdf
Aliases:
CVE-2025-32053
libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-2fpq-q21y-83a7 A vulnerability in libsoup might allow remote attackers to execute arbitrary code. CVE-2017-2885
VCID-9vuw-57ex-k7ez security update CVE-2018-12910

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T00:42:11.812501+00:00 Debian Oval Importer Affected by VCID-k9bu-zasm-vfgr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-16T00:00:27.142897+00:00 Debian Oval Importer Affected by VCID-yx68-81fu-ffar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T23:30:01.445733+00:00 Debian Oval Importer Affected by VCID-uk2y-997k-4qat https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T22:54:06.843832+00:00 Debian Oval Importer Affected by VCID-f481-8mb7-dbed https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:44:30.873489+00:00 Debian Oval Importer Affected by VCID-v9pv-qh9a-97g9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:29:12.659280+00:00 Debian Oval Importer Affected by VCID-zsdd-pzyb-nbdf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:21:04.202682+00:00 Debian Oval Importer Affected by VCID-4m39-v7d7-1ba7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T20:48:10.684535+00:00 Debian Oval Importer Affected by VCID-ku6w-4wsv-qbe4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T20:16:34.872593+00:00 Debian Oval Importer Affected by VCID-6skx-v6sg-53gq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:16:58.542296+00:00 Debian Oval Importer Affected by VCID-9uua-rxjd-fkf6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:10:02.543664+00:00 Debian Oval Importer Affected by VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:03:06.316979+00:00 Debian Oval Importer Affected by VCID-fwhq-2jj5-wka3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:01:46.998105+00:00 Debian Oval Importer Affected by VCID-zrmu-bwfg-e3hp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T18:22:41.114437+00:00 Debian Oval Importer Affected by VCID-svba-hf1d-y7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T18:15:00.176315+00:00 Debian Oval Importer Affected by VCID-zhp7-2ks9-m7es https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:43:59.954670+00:00 Debian Oval Importer Affected by VCID-7hhg-3u9v-nqfw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:33:43.409098+00:00 Debian Oval Importer Affected by VCID-sabm-gujq-j3fb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:12:41.334878+00:00 Debian Oval Importer Affected by VCID-athp-xk5g-jbhu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T16:20:21.694019+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T16:09:25.565780+00:00 Debian Oval Importer Affected by VCID-24tr-cene-gfch https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T15:52:34.910555+00:00 Debian Oval Importer Affected by VCID-rd74-1427-eybf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T14:23:23.030206+00:00 Debian Oval Importer Fixing VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.4.0
2026-04-15T14:17:19.817512+00:00 Debian Oval Importer Fixing VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.4.0
2026-04-12T00:14:59.776622+00:00 Debian Oval Importer Affected by VCID-k9bu-zasm-vfgr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:34:37.190088+00:00 Debian Oval Importer Affected by VCID-yx68-81fu-ffar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:05:18.754472+00:00 Debian Oval Importer Affected by VCID-uk2y-997k-4qat https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T22:30:35.189686+00:00 Debian Oval Importer Affected by VCID-f481-8mb7-dbed https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:23:12.345632+00:00 Debian Oval Importer Affected by VCID-v9pv-qh9a-97g9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:08:23.352543+00:00 Debian Oval Importer Affected by VCID-zsdd-pzyb-nbdf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:00:37.565191+00:00 Debian Oval Importer Affected by VCID-4m39-v7d7-1ba7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T20:29:03.191549+00:00 Debian Oval Importer Affected by VCID-ku6w-4wsv-qbe4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T19:58:21.082043+00:00 Debian Oval Importer Affected by VCID-6skx-v6sg-53gq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T19:00:24.245406+00:00 Debian Oval Importer Affected by VCID-9uua-rxjd-fkf6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:53:43.486936+00:00 Debian Oval Importer Affected by VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:47:06.528337+00:00 Debian Oval Importer Affected by VCID-fwhq-2jj5-wka3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:45:50.465662+00:00 Debian Oval Importer Affected by VCID-zrmu-bwfg-e3hp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:07:49.800632+00:00 Debian Oval Importer Affected by VCID-svba-hf1d-y7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:00:26.285672+00:00 Debian Oval Importer Affected by VCID-zhp7-2ks9-m7es https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:30:02.706074+00:00 Debian Oval Importer Affected by VCID-7hhg-3u9v-nqfw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:20:03.346289+00:00 Debian Oval Importer Affected by VCID-sabm-gujq-j3fb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:59:18.432489+00:00 Debian Oval Importer Affected by VCID-athp-xk5g-jbhu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:07:40.480286+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T15:56:55.619058+00:00 Debian Oval Importer Affected by VCID-24tr-cene-gfch https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T15:40:11.921578+00:00 Debian Oval Importer Affected by VCID-rd74-1427-eybf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T14:11:43.857518+00:00 Debian Oval Importer Fixing VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.3.0
2026-04-11T14:05:50.562595+00:00 Debian Oval Importer Fixing VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.3.0
2026-04-08T23:45:57.896972+00:00 Debian Oval Importer Affected by VCID-k9bu-zasm-vfgr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T23:07:19.224976+00:00 Debian Oval Importer Affected by VCID-yx68-81fu-ffar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T22:39:04.544539+00:00 Debian Oval Importer Affected by VCID-uk2y-997k-4qat https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T22:06:11.649993+00:00 Debian Oval Importer Affected by VCID-f481-8mb7-dbed https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T21:01:49.650210+00:00 Debian Oval Importer Affected by VCID-v9pv-qh9a-97g9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:47:27.235010+00:00 Debian Oval Importer Affected by VCID-zsdd-pzyb-nbdf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:39:52.464538+00:00 Debian Oval Importer Affected by VCID-4m39-v7d7-1ba7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:09:24.333181+00:00 Debian Oval Importer Affected by VCID-ku6w-4wsv-qbe4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T19:40:11.170137+00:00 Debian Oval Importer Affected by VCID-6skx-v6sg-53gq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:44:55.071573+00:00 Debian Oval Importer Affected by VCID-9uua-rxjd-fkf6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:38:27.342153+00:00 Debian Oval Importer Affected by VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:32:05.943048+00:00 Debian Oval Importer Affected by VCID-fwhq-2jj5-wka3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:30:52.130896+00:00 Debian Oval Importer Affected by VCID-zrmu-bwfg-e3hp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:54:16.078162+00:00 Debian Oval Importer Affected by VCID-svba-hf1d-y7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:47:04.457937+00:00 Debian Oval Importer Affected by VCID-zhp7-2ks9-m7es https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:18:00.081419+00:00 Debian Oval Importer Affected by VCID-7hhg-3u9v-nqfw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:08:30.578716+00:00 Debian Oval Importer Affected by VCID-sabm-gujq-j3fb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:48:49.581561+00:00 Debian Oval Importer Affected by VCID-athp-xk5g-jbhu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:00:19.702205+00:00 Debian Oval Importer Affected by VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:50:05.248500+00:00 Debian Oval Importer Affected by VCID-24tr-cene-gfch https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:34:05.768326+00:00 Debian Oval Importer Affected by VCID-rd74-1427-eybf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-07T22:45:40.625723+00:00 Debian Oval Importer Fixing VCID-2fpq-q21y-83a7 https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.1.0
2026-04-07T22:39:52.432883+00:00 Debian Oval Importer Fixing VCID-9vuw-57ex-k7ez https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.1.0