CVE-2025-2784 — уязвимость CVSS 7

A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.

Gnome LibsoupRedhat Codeready linux builderRedhat Codeready linux builder for arm64Redhat Codeready linux builder for arm64 eusRedhat Codeready linux builder for ibm z systemsRedhat Codeready linux builder for ibm z systems eusRedhat Codeready linux builder for power little endianRedhat Codeready linux builder for power little endian eusRedhat Enterprise linuxRedhat Enterprise linux eusRedhat Enterprise linux for arm 64Redhat Enterprise linux for arm 64 eusRedhat Enterprise linux for ibm z systemsRedhat Enterprise linux for ibm z systems eusRedhat Enterprise linux for power little endianRedhat Enterprise linux for power little endian eusRedhat Enterprise linux serverRedhat Enterprise linux server ausRedhat Enterprise linux server for power little endian update services for sap solutionsRedhat Enterprise linux server tusRedhat Enterprise linux update services for sap solutions

Балл	7 — высокая
Вектор	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H