Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/libsoup2.4@2.72.0-2
purl pkg:deb/debian/libsoup2.4@2.72.0-2
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (19)
Vulnerability Summary Fixed by
VCID-24tr-cene-gfch
Aliases:
CVE-2025-32911
libsoup: Double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" GHashTable value
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-4m39-v7d7-1ba7
Aliases:
CVE-2025-32050
libsoup: Integer overflow in append_param_quoted
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-6skx-v6sg-53gq
Aliases:
CVE-2025-2784
libsoup: Heap buffer over-read in `skip_insignificant_space` when sniffing content
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-7hhg-3u9v-nqfw
Aliases:
CVE-2025-4945
libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-9uua-rxjd-fkf6
Aliases:
CVE-2025-4969
libsoup: Off-by-One Out-of-Bounds Read in find_boundary() in soup-multipart.c
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-athp-xk5g-jbhu
Aliases:
CVE-2025-32909
libsoup: NULL Pointer Dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-f481-8mb7-dbed
Aliases:
CVE-2025-32910
libsoup: Null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an Unauthorized response with Digest authentication
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-htuv-qv35-gycj
Aliases:
CVE-2025-46420
libsoup: Memory leak on soup_header_parse_quality_list() via soup-headers.c
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-k9bu-zasm-vfgr
Aliases:
CVE-2025-32912
libsoup: NULL pointer dereference in client when server omits the "nonce" parameter in an Unauthorized response with Digest authentication
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-ku6w-4wsv-qbe4
Aliases:
CVE-2025-32906
libsoup: Out of bounds reads in soup_headers_parse_request()
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-rd74-1427-eybf
Aliases:
CVE-2025-4948
libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-sabm-gujq-j3fb
Aliases:
CVE-2025-4476
libsoup: Null pointer dereference in libsoup may lead to Denial Of Service
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-svba-hf1d-y7ez
Aliases:
CVE-2024-52530
libsoup: HTTP request smuggling via stripping null bytes from the ends of header names
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-uk2y-997k-4qat
Aliases:
CVE-2024-52531
libsoup: buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-v9pv-qh9a-97g9
Aliases:
CVE-2024-52532
libsoup: infinite loop while reading websocket data
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
VCID-yx68-81fu-ffar
Aliases:
CVE-2025-32914
libsoup: OOB Read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-zhp7-2ks9-m7es
Aliases:
CVE-2025-32913
libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in Content-Disposition header
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-zrmu-bwfg-e3hp
Aliases:
CVE-2025-32052
libsoup: Heap buffer overflow in sniff_unknown()
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
VCID-zsdd-pzyb-nbdf
Aliases:
CVE-2025-32053
libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()
2.74.3-1+deb12u1
Affected by 16 other vulnerabilities.
2.74.3-10.1
Affected by 4 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-fwhq-2jj5-wka3 libsoup: heap-based over-read in soup_ntlm_parse_challenge() in soup-auth-ntlm.c CVE-2019-17266

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:42:49.159341+00:00 Debian Importer Affected by VCID-htuv-qv35-gycj https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T00:42:11.819360+00:00 Debian Oval Importer Affected by VCID-k9bu-zasm-vfgr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-16T00:00:27.148979+00:00 Debian Oval Importer Affected by VCID-yx68-81fu-ffar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T23:30:01.452962+00:00 Debian Oval Importer Affected by VCID-uk2y-997k-4qat https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T22:54:06.851062+00:00 Debian Oval Importer Affected by VCID-f481-8mb7-dbed https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:44:30.881539+00:00 Debian Oval Importer Affected by VCID-v9pv-qh9a-97g9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:29:12.666726+00:00 Debian Oval Importer Affected by VCID-zsdd-pzyb-nbdf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:21:04.210646+00:00 Debian Oval Importer Affected by VCID-4m39-v7d7-1ba7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T20:48:10.693143+00:00 Debian Oval Importer Affected by VCID-ku6w-4wsv-qbe4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T20:16:34.880502+00:00 Debian Oval Importer Affected by VCID-6skx-v6sg-53gq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:16:58.549542+00:00 Debian Oval Importer Affected by VCID-9uua-rxjd-fkf6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:03:06.324897+00:00 Debian Oval Importer Fixing VCID-fwhq-2jj5-wka3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:01:47.005076+00:00 Debian Oval Importer Affected by VCID-zrmu-bwfg-e3hp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T18:22:41.122257+00:00 Debian Oval Importer Affected by VCID-svba-hf1d-y7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T18:15:00.184250+00:00 Debian Oval Importer Affected by VCID-zhp7-2ks9-m7es https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:43:59.962329+00:00 Debian Oval Importer Affected by VCID-7hhg-3u9v-nqfw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:33:43.416492+00:00 Debian Oval Importer Affected by VCID-sabm-gujq-j3fb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:12:41.341286+00:00 Debian Oval Importer Affected by VCID-athp-xk5g-jbhu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T16:09:25.573349+00:00 Debian Oval Importer Affected by VCID-24tr-cene-gfch https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T15:52:34.917387+00:00 Debian Oval Importer Affected by VCID-rd74-1427-eybf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-13T08:42:58.663476+00:00 Debian Importer Affected by VCID-htuv-qv35-gycj https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T00:14:59.780479+00:00 Debian Oval Importer Affected by VCID-k9bu-zasm-vfgr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:34:37.197953+00:00 Debian Oval Importer Affected by VCID-yx68-81fu-ffar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:05:18.762365+00:00 Debian Oval Importer Affected by VCID-uk2y-997k-4qat https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T22:30:35.196656+00:00 Debian Oval Importer Affected by VCID-f481-8mb7-dbed https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:23:12.352880+00:00 Debian Oval Importer Affected by VCID-v9pv-qh9a-97g9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:08:23.359432+00:00 Debian Oval Importer Affected by VCID-zsdd-pzyb-nbdf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:00:37.573712+00:00 Debian Oval Importer Affected by VCID-4m39-v7d7-1ba7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T20:29:03.199669+00:00 Debian Oval Importer Affected by VCID-ku6w-4wsv-qbe4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T19:58:21.090767+00:00 Debian Oval Importer Affected by VCID-6skx-v6sg-53gq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T19:00:24.253779+00:00 Debian Oval Importer Affected by VCID-9uua-rxjd-fkf6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:47:06.535646+00:00 Debian Oval Importer Fixing VCID-fwhq-2jj5-wka3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:45:50.473366+00:00 Debian Oval Importer Affected by VCID-zrmu-bwfg-e3hp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:07:49.808707+00:00 Debian Oval Importer Affected by VCID-svba-hf1d-y7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:00:26.294043+00:00 Debian Oval Importer Affected by VCID-zhp7-2ks9-m7es https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:30:02.714793+00:00 Debian Oval Importer Affected by VCID-7hhg-3u9v-nqfw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:20:03.354297+00:00 Debian Oval Importer Affected by VCID-sabm-gujq-j3fb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:59:18.440072+00:00 Debian Oval Importer Affected by VCID-athp-xk5g-jbhu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T15:56:55.626937+00:00 Debian Oval Importer Affected by VCID-24tr-cene-gfch https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T15:40:11.930166+00:00 Debian Oval Importer Affected by VCID-rd74-1427-eybf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-08T23:45:57.904994+00:00 Debian Oval Importer Affected by VCID-k9bu-zasm-vfgr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T23:07:19.234754+00:00 Debian Oval Importer Affected by VCID-yx68-81fu-ffar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T22:39:04.553267+00:00 Debian Oval Importer Affected by VCID-uk2y-997k-4qat https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T22:06:11.659392+00:00 Debian Oval Importer Affected by VCID-f481-8mb7-dbed https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T21:01:49.659231+00:00 Debian Oval Importer Affected by VCID-v9pv-qh9a-97g9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:47:27.244069+00:00 Debian Oval Importer Affected by VCID-zsdd-pzyb-nbdf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:39:52.480538+00:00 Debian Oval Importer Affected by VCID-4m39-v7d7-1ba7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:09:24.341552+00:00 Debian Oval Importer Affected by VCID-ku6w-4wsv-qbe4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T19:48:17.120019+00:00 Debian Importer Affected by VCID-htuv-qv35-gycj https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-08T19:40:11.178552+00:00 Debian Oval Importer Affected by VCID-6skx-v6sg-53gq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:44:55.079985+00:00 Debian Oval Importer Affected by VCID-9uua-rxjd-fkf6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:32:05.952029+00:00 Debian Oval Importer Fixing VCID-fwhq-2jj5-wka3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:30:52.139818+00:00 Debian Oval Importer Affected by VCID-zrmu-bwfg-e3hp https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:54:16.086702+00:00 Debian Oval Importer Affected by VCID-svba-hf1d-y7ez https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:47:04.468950+00:00 Debian Oval Importer Affected by VCID-zhp7-2ks9-m7es https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:18:00.089982+00:00 Debian Oval Importer Affected by VCID-7hhg-3u9v-nqfw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:08:30.587956+00:00 Debian Oval Importer Affected by VCID-sabm-gujq-j3fb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:48:49.590478+00:00 Debian Oval Importer Affected by VCID-athp-xk5g-jbhu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:50:05.258811+00:00 Debian Oval Importer Affected by VCID-24tr-cene-gfch https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:34:05.787038+00:00 Debian Oval Importer Affected by VCID-rd74-1427-eybf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0