The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20354-1 advisory.

    - CVE-2025-4476: null pointer dereference may lead to denial of service (bsc#1243422).
    - CVE-2025-14523: Duplicate Host Header Handling Causes Host-Parsing Discrepancy (bsc#1254876).
    - CVE-2025-32049: Denial of Service attack to websocket server (bsc#1240751).
    - CVE-2026-0716: improper bounds handling may allow out-of-bounds read (bsc#1256418).
    - CVE-2026-0719: stack-based buffer overflow in NTLM authentication can lead to arbitrary code execution     (bsc#1256399).
    - CVE-2026-1467: lack of input sanitization can lead to unintended or unauthorized HTTP requests     (bsc#1257398).
    - CVE-2026-1539: proxy authentication credentials leaked via the Proxy-Authorization header when handling     HTTP redirects       (bsc#1257441).
    - CVE-2026-1760: improper handling of HTTP requests combining certain headers by SoupServer can lead to     HTTP request       smuggling and potential DoS (bsc#1257597).
    - CVE-2026-2369: Buffer overread due to integer underflow when handling zero-length resources     (bsc#1258120).
    - CVE-2026-2443: out-of-bounds read when processing specially crafted HTTP Range headers can lead to heap     information       disclosure to remote attackers (bsc#1258170).
    - CVE-2026-2708: HTTP request smuggling via duplicate Content-Length headers (bsc#1258508).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be     triggered when a libsoup client receives a 401 (Unauthorized) HTTP response containing a specifically     crafted domain parameter within the WWW-Authenticate header. Processing this malformed header can lead to     a crash of the client application using libsoup. An attacker could exploit this by setting up a malicious     HTTP server. If a user's application using the vulnerable libsoup library connects to this malicious     server, it could result in a denial-of-service. Successful exploitation requires tricking a user's client     application into connecting to the attacker's malicious server.(CVE-2025-4476)

Tenable has extracted the preceding description block directly from the EulerOS libsoup security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984675 advisory.

    A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be     triggered when a libsoup client receives a 401 (Unauthorized) HTTP response containing a specifically     crafted domain parameter within the WWW-Authenticate header. Processing this malformed header can lead to     a crash of the client application using libsoup. An attacker could exploit this by setting up a malicious     HTTP server. If a user's application using the vulnerable libsoup library connects to this malicious     server, it could result in a denial-of-service. Successful exploitation requires tricking a user's client     application into connecting to the attacker's malicious server.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0703-1 advisory.

    - CVE-2026-0716: improper bounds handling may allow out-of-bounds read (bsc#1256418).
    - CVE-2025-4476: null pointer dereference may lead to denial of service (bsc#1243422).
    - CVE-2025-32049: denial of Service attack to websocket server (bsc#1240751).
    - CVE-2026-2369: buffer overread due to integer underflow when handling zero-length resources     (bsc#1258120).
    - CVE-2026-2443: out-of-bounds read when processing specially crafted HTTP Range headers can lead to heap     information       disclosure to remote attackers (bsc#1258170).
    - CVE-2026-2708: HTTP request smuggling via duplicate Content-Length headers (bsc#1258508).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of libsoup installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-4476 advisory.

  - A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be     triggered when a libsoup client receives a 401 (Unauthorized) HTTP response containing a specifically     crafted domain parameter within the WWW-Authenticate header. Processing this malformed header can lead to     a crash of the client application using libsoup. An attacker could exploit this by setting up a malicious     HTTP server. If a user's application using the vulnerable libsoup library connects to this malicious     server, it could result in a denial-of-service. Successful exploitation requires tricking a user's client     application into connecting to the attacker's malicious server. (CVE-2025-4476)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has libsoup packages installed that are affected by multiple vulnerabilities:

  - A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a     zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access     sensitive information or cause an application level denial of service. (CVE-2026-2369)

  - GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at     the end of header names are ignored, i.e., a Transfer-Encoding\0: chunked header is treated the same as     a Transfer-Encoding: chunked header. (CVE-2024-52530)

  - A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and     other applications for web communication. When processing cookies with specially crafted expiration dates,     the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of     memory contents, potentially exposing sensitive information from the process using libsoup.
    (CVE-2025-11021)

  - A flaw in libsoup's HTTP header handling allows multiple Host: headers in a request and returns the last     occurrence for server-side processing. Common front proxies often honor the first Host: header, so this     mismatch can cause vhost confusion where a proxy routes a request to one backend but the backend     interprets it as destined for another host. This discrepancy enables request-smuggling style attacks,     cache poisoning, or bypassing host-based access controls when an attacker supplies duplicate Host headers.
    (CVE-2025-14523)

  - A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content     via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to     a crafted HTTP response by an HTTP server. (CVE-2025-2784)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be     triggered when a libsoup client receives a 401 (Unauthorized) HTTP response containing a specifically     crafted domain parameter within the WWW-Authenticate header. Processing this malformed header can lead to     a crash of the client application using libsoup. An attacker could exploit this by setting up a malicious     HTTP server. If a user's application using the vulnerable libsoup library connects to this malicious     server, it could result in a denial-of-service. Successful exploitation requires tricking a user's client     application into connecting to the attacker's malicious server. (CVE-2025-4476)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
302341	openSUSE 16 Security Update : libsoup2 (openSUSE-SU-2026:20354-1)	Nessus	SuSE Local Security Checks	2026/3/15	2026/3/26	high
261871	EulerOS 2.0 SP12 : libsoup (EulerOS-SA-2025-2046)	Nessus	Huawei Local Security Checks	2025/9/10	2026/2/24	medium
264854	EulerOS 2.0 SP13 : libsoup (EulerOS-SA-2025-2146)	Nessus	Huawei Local Security Checks	2025/9/16	2026/2/24	medium
266966	Unity Linux 20.1070e Security Update: libsoup (UTSA-2025-984675)	Nessus	Unity Linux Local Security Checks	2025/10/7	2026/2/24	medium
300651	SUSE SLES12 Security Update : libsoup (SUSE-SU-2026:0703-1)	Nessus	SuSE Local Security Checks	2026/3/4	2026/3/24	medium
241850	Azure Linux 3.0 Security Update: libsoup (CVE-2025-4476)	Nessus	Azure Linux Local Security Checks	2025/7/11	2026/2/24	medium
343555	NewStart CGSL MAIN 7.02 : libsoup Multiple Vulnerabilities (NS-SA-2026-0100)	Nessus	NewStart CGSL Local Security Checks	2026/9/8	2026/9/8	high
244192	Linux Distros Unpatched Vulnerability : CVE-2025-4476	Nessus	Misc.	2025/8/6	2026/11/6	medium

检测

插件搜索

high

medium

medium

medium

medium

medium

high

medium