Vulnerability · Published Nov 11, 2024 · Assigned by mitre
CVE-2024-52531
Medium 6.5
In plain English
A medium-severity out-of-bounds write in libsoup from GNOME. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.7%top 47.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. There is a plausible way to reach this remotely via soup_message_headers_get_content_type (e.g., an application may want to retrieve the content type of a request or response).
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | libsoup | 2.62.3-7.el8_10 | ALSA-2025:0838 |
| AlmaLinux:9 | libsoup | 2.72.0-8.el9_5.3 | ALSA-2025:0791 |
| AlmaLinux:8 | libsoup-devel | 2.62.3-7.el8_10 | ALSA-2025:0838 |
| AlmaLinux:9 | libsoup-devel | 2.72.0-8.el9_5.3 | ALSA-2025:0791 |
| Debian:12 | libsoup2.4 | 2.74.3-1+deb12u1 | DEBIAN-CVE-2024-52531 |
| Debian:13 | libsoup2.4 | 2.74.3-8.1 | DEBIAN-CVE-2024-52531 |
| Debian:12 | libsoup3 | 3.2.3-0+deb12u1 | DEBIAN-CVE-2024-52531 |
| Debian:13 | libsoup3 | 3.6.0-4 | DEBIAN-CVE-2024-52531 |
| Rocky Linux:8 | libsoup | 0:2.62.3-7.el8_10 | RLSA-2025:0838 |
| Rocky Linux:9 | libsoup | 0:2.72.0-8.el9_5.3 | RLSA-2025:0791 |
| Ubuntu:22.04:LTS | libsoup2.4 | 2.74.2-3ubuntu0.1 | USN-7126-1 |
| Ubuntu:22.04:LTS | libsoup2.4 | 2.74.2-3ubuntu0.1 | UBUNTU-CVE-2024-52531 |
| Ubuntu:24.04:LTS | libsoup2.4 | 2.74.3-6ubuntu1.1 | USN-7126-1 |
| Ubuntu:24.04:LTS | libsoup2.4 | 2.74.3-6ubuntu1.1 | UBUNTU-CVE-2024-52531 |
| Ubuntu:24.04:LTS | libsoup3 | 3.4.4-5ubuntu0.1 | UBUNTU-CVE-2024-52531 |
| Ubuntu:24.04:LTS | libsoup3 | 3.4.4-5ubuntu0.1 | USN-7127-1 |
Affected products (as reported)
Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
References
- https://gitlab.gnome.org/Teams/Releng/security/-/wikis/home
- https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/407
- https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/407#note_2316401
- https://offsec.almond.consulting/using-aflplusplus-on-bug-bounty-programs-an-example-with-gnome-libsoup.html
- https://lists.debian.org/debian-lts-announce/2024/12/msg00014.html