CVE-2024-52530

GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e.,...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2024-52530 libsoup2.4 Corrigé dans: 2.72.0-2+deb11u1

Références

advisory github.com
advisory nvd.nist.gov
patch gitlab.gnome.org
report gitlab.gnome.org
web gitlab.gnome.org
web lists.debian.org