A flaw was found in libsoup. A remote attacker could exploit an unsigned to signed conversion error in the `soup_body_input_stream_read_chunked()` function by sending a malicious HTTP request. This vulnerability occurs when libsoup operates behind a non-libsoup proxy server or as a proxy in front of a non-libsoup backend server. Successful exploitation can allow an attacker to bypass security controls, poison web caches, or gain unauthorized access.
| Vendor | Product | Versions |
|---|---|---|
| the gnome project | libsoup | — |
Updated vendor to GNOME, product to libsoup, severity to CRITICAL, and marked the vulnerability as actively exploited.
Initial creation
