libsoup CRLF Injection Vulnerability Allowing HTTP Header Injection

A CRLF injection vulnerability has been identified in libsoup, an HTTP client library, when an HTTP proxy is configured. The issue arises from improper handling of URL-decoded input used to create the Host header, allowing remote attackers to inject additional HTTP headers or complete request bodies. This exploitation can lead to unauthorized HTTP requests being forwarded by the proxy, potentially affecting downstream services.

Impact

Exploitation of this vulnerability can cause HTTP header injection, allowing attackers to manipulate HTTP requests forwarded by the proxy, which could disrupt or interfere with downstream services.

Remediation

To mitigate this vulnerability, avoid processing untrusted URLs in applications that use libsoup with an HTTP proxy enabled. Additionally, restricting network access to the HTTP proxy can help limit exposure.