Bug 2366513 (CVE-2025-4476) - CVE-2025-4476 libsoup: Null pointer dereference in libsoup may lead to Denial Of Service
Summary: CVE-2025-4476 libsoup: Null pointer dereference in libsoup may lead to Denial...
Keywords:
Status: NEW
Alias: CVE-2025-4476
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2366517 2366518 2366519 2366521 2366522 2366523
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-05-15 14:24 UTC by OSIDB Bzimport
Modified: 2025-05-16 17:41 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2025-05-15 14:24:05 UTC 
libsoup is vulnerable to a null pointer dereference in the soup_auth_digest_get_protection_space() function. An HTTP server may crash the libsoup client by responding with a 401 Unauthorized response in combination with a crafted domain parameter in the WWW-Authenticate header.
Note You need to log in before you can comment on or make changes to this bug.