Bug 2427906 (CVE-2026-0719) - CVE-2026-0719 libsoup: Signed to Unsigned Conversion Error Leading to Stack-Based Buffer Overflow in libsoup NTLM Authentication
Summary: CVE-2026-0719 libsoup: Signed to Unsigned Conversion Error Leading to Stack-B...
Keywords:
Status: NEW
Alias: CVE-2026-0719
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2427907 2427908 2427909 2427910 2427911 2427912
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-01-08 12:14 UTC by OSIDB Bzimport
Modified: 2026-02-12 09:09 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2026:1948 0 None None None 2026-02-04 19:14:26 UTC
Red Hat Product Errata RHSA-2026:2005 0 None None None 2026-02-05 03:30:12 UTC
Red Hat Product Errata RHSA-2026:2006 0 None None None 2026-02-05 03:32:38 UTC
Red Hat Product Errata RHSA-2026:2007 0 None None None 2026-02-05 04:05:37 UTC
Red Hat Product Errata RHSA-2026:2008 0 None None None 2026-02-05 03:43:46 UTC
Red Hat Product Errata RHSA-2026:2049 0 None None None 2026-02-05 10:02:31 UTC
Red Hat Product Errata RHSA-2026:2182 0 None None None 2026-02-05 19:23:37 UTC
Red Hat Product Errata RHSA-2026:2214 0 None None None 2026-02-09 02:12:01 UTC
Red Hat Product Errata RHSA-2026:2215 0 None None None 2026-02-09 02:28:04 UTC
Red Hat Product Errata RHSA-2026:2216 0 None None None 2026-02-09 02:49:16 UTC
Red Hat Product Errata RHSA-2026:2396 0 None None None 2026-02-10 08:42:21 UTC
Red Hat Product Errata RHSA-2026:2402 0 None None None 2026-02-10 09:07:13 UTC
Red Hat Product Errata RHSA-2026:2512 0 None None None 2026-02-11 07:41:10 UTC
Red Hat Product Errata RHSA-2026:2513 0 None None None 2026-02-11 07:49:29 UTC
Red Hat Product Errata RHSA-2026:2514 0 None None None 2026-02-11 08:04:07 UTC
Red Hat Product Errata RHSA-2026:2528 0 None None None 2026-02-11 10:32:48 UTC
Red Hat Product Errata RHSA-2026:2529 0 None None None 2026-02-11 10:31:12 UTC
Red Hat Product Errata RHSA-2026:2628 0 None None None 2026-02-12 09:09:18 UTC

Description OSIDB Bzimport 2026-01-08 12:14:54 UTC 
A stack-based buffer overflow vulnerability exists in the md4sum() function of libsoup’s NTLM authentication module (SoupAuthNTLM). When NTLM authentication is enabled, insufficient bounds checking on stack-allocated buffers can allow a local attacker to overwrite adjacent memory. This may result in arbitrary code execution with the privileges of the affected application. Multiple widely deployed components, including WebKit, Evolution, GVfs, and gnome-online-accounts, enable NTLM by default, increasing exposure.
Comment 1 errata-xmlrpc 2026-02-04 19:14:25 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Via RHSA-2026:1948 https://access.redhat.com/errata/RHSA-2026:1948
Comment 2 errata-xmlrpc 2026-02-05 03:30:11 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:2005 https://access.redhat.com/errata/RHSA-2026:2005
Comment 3 errata-xmlrpc 2026-02-05 03:32:37 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:2006 https://access.redhat.com/errata/RHSA-2026:2006
Comment 4 errata-xmlrpc 2026-02-05 03:43:44 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Via RHSA-2026:2008 https://access.redhat.com/errata/RHSA-2026:2008
Comment 5 errata-xmlrpc 2026-02-05 04:05:36 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2026:2007 https://access.redhat.com/errata/RHSA-2026:2007
Comment 6 errata-xmlrpc 2026-02-05 10:02:30 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:2049 https://access.redhat.com/errata/RHSA-2026:2049
Comment 7 errata-xmlrpc 2026-02-05 19:23:35 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:2182 https://access.redhat.com/errata/RHSA-2026:2182
Comment 8 errata-xmlrpc 2026-02-09 02:12:00 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:2214 https://access.redhat.com/errata/RHSA-2026:2214
Comment 9 errata-xmlrpc 2026-02-09 02:28:03 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:2215 https://access.redhat.com/errata/RHSA-2026:2215
Comment 10 errata-xmlrpc 2026-02-09 02:49:15 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:2216 https://access.redhat.com/errata/RHSA-2026:2216
Comment 11 errata-xmlrpc 2026-02-10 08:42:20 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.2 Advanced Update Support

Via RHSA-2026:2396 https://access.redhat.com/errata/RHSA-2026:2396
Comment 12 errata-xmlrpc 2026-02-10 09:07:12 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Via RHSA-2026:2402 https://access.redhat.com/errata/RHSA-2026:2402
Comment 13 errata-xmlrpc 2026-02-11 07:41:09 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.6 Telecommunications Update Service

Via RHSA-2026:2512 https://access.redhat.com/errata/RHSA-2026:2512
Comment 14 errata-xmlrpc 2026-02-11 07:49:28 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.2 Advanced Update Support

Via RHSA-2026:2513 https://access.redhat.com/errata/RHSA-2026:2513
Comment 15 errata-xmlrpc 2026-02-11 08:04:06 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Via RHSA-2026:2514 https://access.redhat.com/errata/RHSA-2026:2514
Comment 16 errata-xmlrpc 2026-02-11 10:31:10 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.6 Telecommunications Update Service

Via RHSA-2026:2529 https://access.redhat.com/errata/RHSA-2026:2529
Comment 17 errata-xmlrpc 2026-02-11 10:32:46 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Via RHSA-2026:2528 https://access.redhat.com/errata/RHSA-2026:2528
Comment 18 errata-xmlrpc 2026-02-12 09:09:17 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7 Extended Lifecycle Support

Via RHSA-2026:2628 https://access.redhat.com/errata/RHSA-2026:2628
Note You need to log in before you can comment on or make changes to this bug.