Nixpkgs security tracker

Untriaged

Permalink CVE-2025-32908

7.5 HIGH

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): HIGH

updated 2 months ago by @LeSuisse Activity log

Created automatic suggestion 6 months, 3 weeks ago
@LeSuisse removed package tests.pkg-config.defaultPkgConfigPackages."libsoup-gnome-2.4" 2 months ago

Libsoup: denial of service on libsoup through http/2 server

A flaw was found in libsoup. The HTTP/2 server in libsoup may not fully validate the values of pseudo-headers :scheme, :authority, and :path, which may allow a user to cause a denial of service (DoS).

References

https://access.redhat.com/security/cve/CVE-2025-32908 x_refsource_REDHATvdb-entry
RHBZ#2359343 issue-trackingx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2025-32908 x_refsource_REDHATvdb-entry
RHBZ#2359343 issue-trackingx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2025-32908 x_refsource_REDHATvdb-entry
RHBZ#2359343 issue-trackingx_refsource_REDHAT
RHSA-2025:7505 x_refsource_REDHATvendor-advisory
https://access.redhat.com/security/cve/CVE-2025-32908 x_refsource_REDHATvdb-entry
RHBZ#2359343 issue-trackingx_refsource_REDHAT
RHSA-2025:7505 x_refsource_REDHATvendor-advisory
https://access.redhat.com/security/cve/CVE-2025-32908 x_refsource_REDHATvdb-entry
RHBZ#2359343 issue-trackingx_refsource_REDHAT
RHSA-2025:7505 x_refsource_REDHATvendor-advisory
https://access.redhat.com/security/cve/CVE-2025-32908 x_refsource_REDHATvdb-entry
RHBZ#2359343 issue-trackingx_refsource_REDHAT
RHSA-2025:7505 x_refsource_REDHATvendor-advisory
https://access.redhat.com/security/cve/CVE-2025-32908 x_refsource_REDHATvdb-entry
RHBZ#2359343 issue-trackingx_refsource_REDHAT
RHSA-2025:7505 x_refsource_REDHATvendor-advisory
https://access.redhat.com/security/cve/CVE-2025-32908 x_refsource_REDHATvdb-entry
RHBZ#2359343 issue-trackingx_refsource_REDHAT
RHSA-2025:7505 x_refsource_REDHATvendor-advisory
https://access.redhat.com/security/cve/CVE-2025-32908 x_refsource_REDHATvdb-entry
RHBZ#2359343 issue-trackingx_refsource_REDHAT

Affected products

libsoup

<3.6.5

libsoup3

Matching in nixpkgs

pkgs.libsoup_3

HTTP client/server library for GNOME

nixos-unstable -
- nixpkgs-unstable 3.6.5

pkgs.libsoup_2_4