Log in Start free

Vulnerability · Published May 19, 2025 · Assigned by redhat

CVE-2025-4945Libsoup: integer overflow in cookie expiration date handling in libsoup

Low 3.7

In plain English

A low-severity integer overflow in libsoup. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)3.7Low
Exploit odds (30 days)0.7%top 46.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior, allowing an attacker to bypass cookie expiration logic, causing persistent or unintended cookie behavior. The issue stems from improper validation of large integer inputs during date arithmetic operations within the cookie parsing routines.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8libsoup2.62.3-10.el8_10ALSA-2025:19714
AlmaLinux:9libsoup2.72.0-12.el9_7.1ALSA-2025:20959
AlmaLinux:8libsoup-devel2.62.3-10.el8_10ALSA-2025:19714
AlmaLinux:9libsoup-devel2.72.0-12.el9_7.1ALSA-2025:20959
AlmaLinux:10libsoup33.6.5-3.el10_1.6ALSA-2025:21032
AlmaLinux:10libsoup3-devel3.6.5-3.el10_1.6ALSA-2025:21032
AlmaLinux:10libsoup3-doc3.6.5-3.el10_1.6ALSA-2025:21032
Debian:12libsoup2.4no fix listedDEBIAN-CVE-2025-4945
Debian:13libsoup2.4no fix listedDEBIAN-CVE-2025-4945
Debian:12libsoup3no fix listedDEBIAN-CVE-2025-4945
Debian:13libsoup33.6.5-2DEBIAN-CVE-2025-4945
Rocky Linux:8libsoup0:2.62.3-10.el8_10RLSA-2025:19714
Rocky Linux:9libsoup0:2.72.0-12.el9_7.1RLSA-2025:20959
Rocky Linux:9libsoup0:2.72.0-10.el9_6.3RLSA-2025:19713
Rocky Linux:10libsoup30:3.6.5-3.el10_0.9RLSA-2025:19720
Rocky Linux:10libsoup30:3.6.5-3.el10_1.6RLSA-2025:21032
Ubuntu:22.04:LTSlibsoup2.42.74.2-3ubuntu0.6USN-7643-1
Ubuntu:22.04:LTSlibsoup2.42.74.2-3ubuntu0.6UBUNTU-CVE-2025-4945
Ubuntu:24.04:LTSlibsoup2.42.74.3-6ubuntu1.6UBUNTU-CVE-2025-4945
Ubuntu:24.04:LTSlibsoup2.42.74.3-6ubuntu1.6USN-7643-1
Ubuntu:25.10libsoup2.42.74.3-10.1ubuntu4UBUNTU-CVE-2025-4945
Ubuntu:26.04:LTSlibsoup2.42.74.3-10.1ubuntu4UBUNTU-CVE-2025-4945
Ubuntu:24.04:LTSlibsoup33.4.4-5ubuntu0.5UBUNTU-CVE-2025-4945
Ubuntu:24.04:LTSlibsoup33.4.4-5ubuntu0.5USN-7643-1
Ubuntu:25.10libsoup33.6.5-3UBUNTU-CVE-2025-4945

Affected products (as reported)

VendorProductVersions
libsoup 0 – through 3.6.5
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support see references
Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support see references
Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On see references
Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support see references
Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service see references
Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions see references
Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions see references
Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions see references
Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support see references
Red Hat Red Hat Enterprise Linux 6 see references

Weakness: CWE-190 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

References