AZL-61945
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-61945.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-61945
- Upstream
- Published
- 2025-05-21T06:16:28Z
- Modified
- 2026-04-01T05:19:57.465309Z
- Summary
- CVE-2025-4969 affecting package libsoup for versions less than 3.0.4-9
- Details
-
A vulnerability was found in the libsoup package. This flaw stems from its failure to correctly verify the termination of multipart HTTP messages. This can allow a remote attacker to send a specially crafted multipart HTTP body, causing the libsoup-consuming server to read beyond its allocated memory boundaries (out-of-bounds read).
- References