AZL-61958
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-61958.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-61958
- Upstream
- Published
- 2025-05-21T06:16:28Z
- Modified
- 2026-04-01T05:19:58.111768Z
- Summary
- CVE-2025-4969 affecting package libsoup for versions less than 3.4.4-9
- Details
-
A vulnerability was found in the libsoup package. This flaw stems from its failure to correctly verify the termination of multipart HTTP messages. This can allow a remote attacker to send a specially crafted multipart HTTP body, causing the libsoup-consuming server to read beyond its allocated memory boundaries (out-of-bounds read).
- References