CVE-2025-7370

libsoup: libsoup null pointer dereference

View on CVE.org
Published Jul 10, 2025 CVSS 3.1 · 7.5 High EPSS n/a KEV · Not listed
Description
Upon investigtion upstream maintainers discovered this was not a real issue. See the references for more details. See: https://gitlab.gnome.org/GNOME/libsoup/-/issues/430#note_2494090.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-20997 Upon investigtion upstream maintainers discovered this was not a real issue. See the references for more details. See: https://gitlab.gnome.org/GNOME/libsoup/-/issues/430#note_2494090.
History
Type Values Removed Values Added
Metrics epss

{'score': 0.0006}
Type Values Removed Values Added
Title Libsoup: libsoup null pointer dereference libsoup: libsoup null pointer dereference
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description A flaw was found in libsoup. A NULL pointer dereference vulnerability occurs in libsoup's cookie parsing functionality. When processing a cookie without a domain parameter, the soup_cookie_jar_add_cookie() function will crash, resulting in a denial of service. Upon investigtion upstream maintainers discovered this was not a real issue. See the references for more details. See: https://gitlab.gnome.org/GNOME/libsoup/-/issues/430#note_2494090.
CPEs cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux
Type Values Removed Values Added
Metrics epss

{'score': 0.0006}
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description No description is available for this CVE. A flaw was found in libsoup. A NULL pointer dereference vulnerability occurs in libsoup's cookie parsing functionality. When processing a cookie without a domain parameter, the soup_cookie_jar_add_cookie() function will crash, resulting in a denial of service.
Title libsoup: libsoup null pointer dereference Libsoup: libsoup null pointer dereference
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux
References
Type Values Removed Values Added
Description No description is available for this CVE.
Title libsoup: libsoup null pointer dereference
Weaknesses CWE-476
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Important
Earlier changes (3)

Subscriptions

No data.

Weaknesses

Sources

Status
REJECTED
Assigner
redhat
Published
Updated
Jul 15, 2025, 9:05 PM
Reserved
Jul 8, 2025, 9:12 PM

View source JSON

Updated

JSON

Status
Rejected
Published
Jul 10, 2025, 3:15 PM
Modified
Jul 15, 2025, 9:15 PM

View source JSON

Severity
Important
Public date
Jul 8, 2025, 12:00 AM

View source Bugzilla JSON

No data.