Libsoup Integer Underflow Vulnerability in Multipart Message Processing Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in the libsoup HTTP library, commonly used in GNOME applications, due to an integer underflow in the multipart message parser. This flaw occurs in the 'soup_multipart_new_from_message()' function, where improper validation of specially crafted multipart messages can lead to invalid memory access, causing applications or services that rely on libsoup to crash or exit unexpectedly. The vulnerability can be exploited remotely without authentication or user interaction, disrupting the availability of the affected application or service.

Impact

Exploitation of this vulnerability causes applications or services using libsoup to crash or terminate unexpectedly, leading to a denial-of-service condition.

Remediation

Users can apply the available update for libsoup. Instructions for applying this update can be found on the Red Hat Customer Portal.