← CVE Intelligence

CVE-2025-14523

Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins) PUBLISHED

Description (CNA)

A flaw in libsoup’s HTTP header handling allows multiple Host: headers in a request and returns the last occurrence for server-side processing. Common front proxies often honor the first Host: header, so this mismatch can cause vhost confusion where a proxy routes a request to one backend but the backend interprets it as destined for another host. This discrepancy enables request-smuggling style attacks, cache poisoning, or bypassing host-based access controls when an attacker supplies duplicate Host headers.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 10unaffected 0:3.6.5-3.el10_1.8 before *
Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Supportunaffected 0:3.6.5-3.el10_0.11 before *
Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Supportunaffected 0:2.62.2-10.el7_9 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:2.62.3-11.el8_10 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:8.10-6.el8_10.1 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:2.62.3-11.el8_10 before *
Red Hat / Red Hat Enterprise Linux 8.2 Advanced Update Supportunaffected 0:2.62.3-1.el8_2.7 before *
Red Hat / Red Hat Enterprise Linux 8.2 Advanced Update Supportunaffected 0:8.10-6.el8_2.1 before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 0:2.62.3-2.el8_4.7 before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 0:8.10-6.el8_4.1 before *
Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onunaffected 0:2.62.3-2.el8_4.7 before *
Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onunaffected 0:8.10-6.el8_4.1 before *
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 0:2.62.3-2.el8_6.7 before *
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 0:8.10-6.el8_6.1 before *
Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Serviceunaffected 0:2.62.3-2.el8_6.7 before *
Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Serviceunaffected 0:8.10-6.el8_6.1 before *
Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsunaffected 0:2.62.3-2.el8_6.7 before *
Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsunaffected 0:8.10-6.el8_6.1 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 0:2.62.3-3.el8_8.7 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 0:8.10-6.el8_8.1 before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 0:2.62.3-3.el8_8.7 before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 0:8.10-6.el8_8.1 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:2.72.0-12.el9_7.3 before *
Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutionsunaffected 0:2.72.0-8.el9_0.8 before *
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsunaffected 0:2.72.0-8.el9_2.8 before *
Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Supportunaffected 0:2.72.0-8.el9_4.8 before *
Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Supportunaffected 0:2.72.0-10.el9_6.5 before *
Red Hat / Red Hat Enterprise Linux 6unknown

CWE

CWE-444

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.