CVE-2025-32907mediumCWE-1050

CVE-2025-32907: medium-severity vulnerability in libsoup

Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header

Published · Updated

Follow this CVE+ Monitor Red Hat Enterprise Linux+ Monitor Red Hat Enterprise Linux 9.4 Extended Update Support

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.7%
In short

A flaw in libsoup's HTTP range request handling allows a malicious client to send overlapping range requests multiple times in a single HTTP request, causing the server to consume excessive memory and degrade performance.

Technical detail

The vulnerability exists in libsoup's range request parser, which does not properly limit the number or overlap of ranges processed in a single HTTP Range header. An unauthenticated remote attacker can craft a malicious HTTP request with many overlapping byte-range specifications to exhaust server memory resources, resulting in degraded service availability without complete denial of service.

Summary generated and translated by AI from the official description.
A flaw was found in libsoup. The implementation of HTTP range requests is vulnerable to a resource consumption attack. This flaw allows a malicious client to request the same range many times in a single HTTP request, causing the server to use large amounts of memory. This does not allow for a full denial of service.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
libsoupRed Hat · Red Hat Enterprise Linux 10Red Hat · Red Hat Enterprise Linux 6Red Hat · Red Hat Enterprise Linux 7Red Hat · Red Hat Enterprise Linux 8Red Hat · Red Hat Enterprise Linux 9Red Hat · Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsRed Hat · Red Hat Enterprise Linux 9.2 Extended Update SupportRed Hat · Red Hat Enterprise Linux 9.4 Extended Update Support
Related CVEs — libsoup

In the same product, most dangerous first.

CVE-2023-4911HIGHGlibc: buffer overflow in ld.so leading to privilege escalationEPSS 63.8%KEVCVE-2024-6387HIGHOpenssh: regresshion - race condition in ssh allows rce/dosEPSS 99.5%CVE-2024-3094CRITICALXz: malicious code in distributed sourceEPSS 90.9%CVE-2024-12084CRITICALRsync: heap buffer overflow in rsync due to improper checksum length handlingEPSS 72.5%CVE-2023-1183MEDIUMArbitrary file writeEPSS 64.9%CVE-2023-34966HIGHSamba: infinite loop in mdssvc rpc service for spotlightEPSS 62.4%