← CVE Intelligence

CVE-2025-32910

Libsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an unauthorized response with digest authentication PUBLISHED

Description (CNA)

A flaw was found in libsoup, where soup_auth_digest_authenticate() is vulnerable to a NULL pointer dereference. This issue may cause the libsoup client to crash.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 0 before 3.6.3
Red Hat / Red Hat Enterprise Linux 8unaffected 0:2.8-3.el8_10.1 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:8.10-1 before *
Red Hat / Red Hat Enterprise Linux 10unaffected
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 7unknown
Red Hat / Red Hat Enterprise Linux 8affected
Red Hat / Red Hat Enterprise Linux 9affected

CWE

CWE-476

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.