Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 libsoup 中發現缺陷。遠端攻擊者可傳送惡意HTTP要求，藉此利用「soup_body_input_stream_read_chunked（）」函式中的未簽署到已簽署的轉換錯誤。當 libsoup 在非 libsoup Proxy 伺服器後面運作或作為非 libsoup 後端伺服器前面的 Proxy 運作時，就會發生此弱點。成功的利用可讓攻擊者繞過安全控制、毒害 Web 快取或獲得未經授權的存取。（CVE-2026-6324）

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 libsoup 中发现一个缺陷。远程攻击者可通过发送恶意 HTTP 请求来利用“soup_body_input_stream_read_chunked（）”函数中的未签名到已签名转换错误。当 libsoup 在非 libsoup 代理服务器后方运行，或作为非 libsoup 后端服务器前面的代理运行时，即会出现此漏洞。成功利用可允许攻击者绕过安全控制、使 Web 缓存中毒或者获得未经授权的访问权限。（CVE-2026-6324）

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - libsoup に欠陥が見つかりました。リモートの攻撃者が、悪意のある HTTP リクエストを送信することにより、「soup_body_input_stream_read_chunked()」関数の符号なしから符号への変換エラーを悪用する可能性があります。この脆弱性は、libsoupが非libsoupプロキシサーバーの背後で、または非libsoupバックエンドサーバーの前のプロキシとして動作する場合に発生します。悪用に成功すると、攻撃者は、セキュリティコントロールのバイパス、Web キャッシュのポイズニング、または認証されていないアクセスの取得を行うことができます。(CVE-2026-6324)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in libsoup. A remote attacker could exploit an unsigned to signed conversion error in the     `soup_body_input_stream_read_chunked()` function by sending a malicious HTTP request. This vulnerability     occurs when libsoup operates behind a non-libsoup proxy server or as a proxy in front of a non-libsoup     backend server. Successful exploitation can allow an attacker to bypass security controls, poison web     caches, or gain unauthorized access.(CVE-2026-6324)

    A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer     improperly handles requests that combine Transfer-Encoding: chunked and Connection: keep-alive headers. A     remote, unauthenticated client can exploit this by sending specially crafted requests, causing SoupServer     to fail to close the connection as required by RFC 9112. This allows the attacker to smuggle additional     requests over the persistent connection, leading to unintended request processing and potential denial-of-     service (DoS) conditions.(CVE-2026-1760)

Tenable has extracted the preceding description block directly from the EulerOS libsoup security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has libsoup packages installed that are affected by multiple vulnerabilities:

  - A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a     zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access     sensitive information or cause an application level denial of service. (CVE-2026-2369)

  - GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at     the end of header names are ignored, i.e., a Transfer-Encoding\0: chunked header is treated the same as     a Transfer-Encoding: chunked header. (CVE-2024-52530)

  - A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and     other applications for web communication. When processing cookies with specially crafted expiration dates,     the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of     memory contents, potentially exposing sensitive information from the process using libsoup.
    (CVE-2025-11021)

  - A flaw in libsoup's HTTP header handling allows multiple Host: headers in a request and returns the last     occurrence for server-side processing. Common front proxies often honor the first Host: header, so this     mismatch can cause vhost confusion where a proxy routes a request to one backend but the backend     interprets it as destined for another host. This discrepancy enables request-smuggling style attacks,     cache poisoning, or bypassing host-based access controls when an attacker supplies duplicate Host headers.
    (CVE-2025-14523)

  - A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content     via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to     a crafted HTTP response by an HTTP server. (CVE-2025-2784)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in libsoup. A remote attacker could exploit an unsigned to signed conversion error in the     `soup_body_input_stream_read_chunked()` function by sending a malicious HTTP request. This vulnerability     occurs when libsoup operates behind a non-libsoup proxy server or as a proxy in front of a non-libsoup     backend server. Successful exploitation can allow an attacker to bypass security controls, poison web     caches, or gain unauthorized access.(CVE-2026-6324)

Tenable has extracted the preceding description block directly from the EulerOS libsoup security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive     session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned     attacker or a malicious HTTP proxy can intercept these cookies, leading to potential session hijacking or     user impersonation.(CVE-2026-5119)

    A flaw was found in libsoup. A remote attacker could exploit an unsigned to signed conversion error in the     `soup_body_input_stream_read_chunked()` function by sending a malicious HTTP request. This vulnerability     occurs when libsoup operates behind a non-libsoup proxy server or as a proxy in front of a non-libsoup     backend server. Successful exploitation can allow an attacker to bypass security controls, poison web     caches, or gain unauthorized access.(CVE-2026-6324)

    A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer     improperly handles requests that combine Transfer-Encoding: chunked and Connection: keep-alive headers. A     remote, unauthenticated client can exploit this by sending specially crafted requests, causing SoupServer     to fail to close the connection as required by RFC 9112. This allows the attacker to smuggle additional     requests over the persistent connection, leading to unintended request processing and potential denial-of-     service (DoS) conditions.(CVE-2026-1760)

Tenable has extracted the preceding description block directly from the EulerOS libsoup security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer     improperly handles requests that combine Transfer-Encoding: chunked and Connection: keep-alive headers. A     remote, unauthenticated client can exploit this by sending specially crafted requests, causing SoupServer     to fail to close the connection as required by RFC 9112. This allows the attacker to smuggle additional     requests over the persistent connection, leading to unintended request processing and potential denial-of-     service (DoS) conditions.(CVE-2026-1760)

    A flaw was found in libsoup. A remote attacker could exploit an unsigned to signed conversion error in the     `soup_body_input_stream_read_chunked()` function by sending a malicious HTTP request. This vulnerability     occurs when libsoup operates behind a non-libsoup proxy server or as a proxy in front of a non-libsoup     backend server. Successful exploitation can allow an attacker to bypass security controls, poison web     caches, or gain unauthorized access.(CVE-2026-6324)

    A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension. The     extension's decompression loop (inflate()) processes data in chunks without enforcing an upper boundary     limit on the output buffer size. While libsoup limits the incoming compressed frame size via     max_incoming_payload_size, it fails to track or limit memory allocation during decompression. A separate     check for decompressed size (max_total_message_size) exists but executes only after inflation is complete,     and it is entirely disabled by default for client connections. A remote, unauthenticated attacker can     exploit this by sending a small, highly compressed payload (a decompression bomb), causing unbounded     memory allocation that triggers an Out-of-Memory (OOM) crash and a Denial of Service     (DoS).(CVE-2026-15709)

Tenable has extracted the preceding description block directly from the EulerOS libsoup security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in libsoup. A remote attacker could exploit an unsigned to signed conversion error in the     `soup_body_input_stream_read_chunked()` function by sending a malicious HTTP request. This vulnerability     occurs when libsoup operates behind a non-libsoup proxy server or as a proxy in front of a non-libsoup     backend server. Successful exploitation can allow an attacker to bypass security controls, poison web     caches, or gain unauthorized access. (CVE-2026-6324)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
317955	Linux Distros 未修補的弱點：CVE-2026-6324	Nessus	Misc.	2026/5/29	2026/6/1	medium
317955	Linux Distros 未修补的漏洞：CVE-2026-6324	Nessus	Misc.	2026/5/29	2026/6/1	medium
317955	Linux Distros のパッチ未適用の脆弱性: CVE-2026-6324	Nessus	Misc.	2026/5/29	2026/6/1	medium
332925	EulerOS 2.0 SP13 : libsoup (EulerOS-SA-2026-2977)	Nessus	Huawei Local Security Checks	2026/8/6	2026/8/6	medium
332904	EulerOS 2.0 SP13 : libsoup (EulerOS-SA-2026-3027)	Nessus	Huawei Local Security Checks	2026/8/6	2026/8/6	medium
343555	NewStart CGSL MAIN 7.02 : libsoup Multiple Vulnerabilities (NS-SA-2026-0100)	Nessus	NewStart CGSL Local Security Checks	2026/9/8	2026/9/8	high
347074	EulerOS 2.0 SP15 : libsoup (EulerOS-SA-2026-3785)	Nessus	Huawei Local Security Checks	2026/9/18	2026/9/18	medium
333427	EulerOS 2.0 SP11 : libsoup (EulerOS-SA-2026-3134)	Nessus	Huawei Local Security Checks	2026/8/8	2026/8/8	high
343635	EulerOS 2.0 SP12 : libsoup (EulerOS-SA-2026-3278)	Nessus	Huawei Local Security Checks	2026/9/8	2026/9/8	medium
346767	EulerOS 2.0 SP15 : libsoup (EulerOS-SA-2026-3810)	Nessus	Huawei Local Security Checks	2026/9/17	2026/9/17	medium
343693	EulerOS 2.0 SP12 : libsoup (EulerOS-SA-2026-3353)	Nessus	Huawei Local Security Checks	2026/9/8	2026/9/8	medium
317955	Linux Distros Unpatched Vulnerability : CVE-2026-6324	Nessus	Misc.	2026/5/29	2026/6/1	medium
333396	EulerOS 2.0 SP11 : libsoup (EulerOS-SA-2026-3079)	Nessus	Huawei Local Security Checks	2026/8/8	2026/8/8	high

检测

插件搜索

medium

medium

medium

medium

medium

high

medium

high

medium

medium

medium

medium

high