libsoup NULL Pointer Dereference Vulnerability in the MP4 Sniffer Function

A NULL pointer dereference vulnerability has been identified in libsoup's SoupContentSniffer component, prior to version 3.6.2. The issue arises in the sniff_mp4 function, where a malicious HTTP server can cause the libsoup client to crash.

Impact

Exploitation of this vulnerability leads to a crash of the libsoup client, causing a denial-of-service condition.

Remediation

This vulnerability has been addressed in Red Hat Enterprise Linux 8. Users can apply the update through the Red Hat Enterprise Linux 8 Update mechanism.