libsoup NULL Pointer Dereference Vulnerability in Digest Authentication Handling

A NULL pointer dereference vulnerability has been identified in libsoup, specifically in the 'soup_auth_digest_authenticate()' function. This issue arises when an HTTP server omits the 'realm' parameter in an Unauthorized response using Digest authentication, leading to a crash of the libsoup client. The vulnerability affects libsoup versions prior to 3.6.3.

Impact

Exploitation of this vulnerability causes a crash of the libsoup client, due to a NULL pointer dereference.

Remediation

Users can upgrade to Red Hat Enterprise Linux 8, where this vulnerability has been addressed. For details on how to apply this update, refer to the Red Hat Enterprise Linux 8 Security Advisory RHSA-2025:8292.