Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-60429.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-60429
Upstream
Published
2025-04-14T14:15:24Z
Modified
2026-04-01T05:19:52.961980Z
Summary
CVE-2025-32907 affecting package libsoup for versions less than 3.0.4-7
Details

A flaw was found in libsoup. The implementation of HTTP range requests is vulnerable to a resource consumption attack. This flaw allows a malicious client to request the same range many times in a single HTTP request, causing the server to use large amounts of memory. This does not allow for a full denial of service.

References

Affected packages

Azure Linux:2 / libsoup

Package

Name
libsoup
Purl
pkg:rpm/azure-linux/libsoup

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.0.4-7

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-60429.json"