CVE-2025-32051 - Vulnerability Details

Vendors	Products
Redhat	Enterprise Linux

Link	Providers
https://access.redhat.com/security/cve/CVE-2025-32051
https://bugzilla.redhat.com/show_bug.cgi?id=2357068
https://nvd.nist.gov/vuln/detail/CVE-2025-32051
https://www.cve.org/CVERecord?id=CVE-2025-32051

Type	Values Removed	Values Added
References		https://nvd.nist.gov/vuln/detail/CVE-2025-32051 https://www.cve.org/CVERecord?id=CVE-2025-32051
Metrics	threat_severity `None`	threat_severity `Moderate`

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		A flaw was found in libsoup. The libsoup soup_uri_decode_data_uri() function may crash when processing malformed data URI. This flaw allows an attacker to cause a denial of service (DoS).
Title		Libsoup: segmentation fault when parsing malformed data uri
First Time appeared		Redhat Redhat enterprise Linux
Weaknesses		CWE-754
CPEs		cpe:/o:redhat:enterprise_linux:6 cpe:/o:redhat:enterprise_linux:7 cpe:/o:redhat:enterprise_linux:8 cpe:/o:redhat:enterprise_linux:9
Vendors & Products		Redhat Redhat enterprise Linux
References		https://access.redhat.com/security/cve/CVE-2025-32051 https://bugzilla.redhat.com/show_bug.cgi?id=2357068
Metrics		cvssV3_1 `{'score': 5.9, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-32051", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "state": "PUBLISHED", "assignerShortName": "redhat", "dateReserved": "2025-04-03T01:42:14.135Z", "datePublished": "2025-04-03T13:36:50.776Z", "dateUpdated": "2025-04-03T14:54:07.542Z"}, "containers": {"cna": {"title": "Libsoup: segmentation fault when parsing malformed data uri", "metrics": [{"other": {"content": {"value": "Moderate", "namespace": "https://access.redhat.com/security/updates/classification/"}, "type": "Red Hat severity rating"}}, {"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS"}], "descriptions": [{"lang": "en", "value": "A flaw was found in libsoup. The libsoup soup_uri_decode_data_uri() function may crash when processing malformed data URI. This flaw allows an attacker to cause a denial of service (DoS)."}], "affected": [{"vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "libsoup", "defaultStatus": "unknown", "cpes": ["cpe:/o:redhat:enterprise_linux:6"]}, {"vendor": "Red Hat", "product": "Red Hat Enterprise Linux 7", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "libsoup", "defaultStatus": "unknown", "cpes": ["cpe:/o:redhat:enterprise_linux:7"]}, {"vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "libsoup", "defaultStatus": "affected", "cpes": ["cpe:/o:redhat:enterprise_linux:8"]}, {"vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "libsoup", "defaultStatus": "affected", "cpes": ["cpe:/o:redhat:enterprise_linux:9"]}], "references": [{"url": "https://access.redhat.com/security/cve/CVE-2025-32051", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2357068", "name": "RHBZ#2357068", "tags": ["issue-tracking", "x_refsource_REDHAT"]}], "datePublic": "2025-04-03T00:00:00.000Z", "problemTypes": [{"descriptions": [{"cweId": "CWE-754", "description": "Improper Check for Unusual or Exceptional Conditions", "lang": "en", "type": "CWE"}]}], "x_redhatCweChain": "CWE-754: Improper Check for Unusual or Exceptional Conditions", "workarounds": [{"lang": "en", "value": "No mitigation is currently available for this vulnerability."}], "timeline": [{"lang": "en", "time": "2025-04-03T01:16:46.979000+00:00", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2025-04-03T00:00:00+00:00", "value": "Made public."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2025-04-03T13:36:50.776Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-04-03T14:46:14.850480Z", "id": "CVE-2025-32051", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-03T14:54:07.542Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2025-32051 (string)

assignerOrgId : 53f830b8-0a3f-465b-8143-3b8a9948e749 (string)

state : PUBLISHED (string)

assignerShortName : redhat (string)

dateReserved : 2025-04-03T01:42:14.135Z (string)

datePublished : 2025-04-03T13:36:50.776Z (string)

dateUpdated : 2025-04-03T14:54:07.542Z (string)

}

containers : { »

cna : { »

title : Libsoup: segmentation fault when parsing malformed data uri (string)

metrics : [ »

0 : { »

other : { »

content : { »

value : Moderate (string)

namespace : https://access.redhat.com/security/updates/classification/ (string)

}

type : Red Hat severity rating (string)

}

1 : { »

cvssV3_1 : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 5.9 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

format : CVSS (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A flaw was found in libsoup. The libsoup soup_uri_decode_data_uri() function may crash when processing malformed data URI. This flaw allows an attacker to cause a denial of service (DoS). (string)

}

]

affected : [ »

0 : { »

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 6 (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

packageName : libsoup (string)

defaultStatus : unknown (string)

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:6 (string)

]

}

1 : { »

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 7 (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

packageName : libsoup (string)

defaultStatus : unknown (string)

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:7 (string)

]

}

2 : { »

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 8 (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

packageName : libsoup (string)

defaultStatus : affected (string)

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:8 (string)

]

}

3 : { »

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 9 (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

packageName : libsoup (string)

defaultStatus : affected (string)

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:9 (string)

]

}

]

references : [ »

0 : { »

url : https://access.redhat.com/security/cve/CVE-2025-32051 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_REDHAT (string)

]

}

1 : { »

url : https://bugzilla.redhat.com/show_bug.cgi?id=2357068 (string)

name : RHBZ#2357068 (string)

tags : [ »

0 : issue-tracking (string)

1 : x_refsource_REDHAT (string)

]

}

]

datePublic : 2025-04-03T00:00:00.000Z (string)

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-754 (string)

description : Improper Check for Unusual or Exceptional Conditions (string)

lang : en (string)

type : CWE (string)

}

]

}

]

x_redhatCweChain : CWE-754: Improper Check for Unusual or Exceptional Conditions (string)

workarounds : [ »

0 : { »

lang : en (string)

value : No mitigation is currently available for this vulnerability. (string)

}

]

timeline : [ »

0 : { »

lang : en (string)

time : 2025-04-03T01:16:46.979000+00:00 (string)

value : Reported to Red Hat. (string)

}

1 : { »

lang : en (string)

time : 2025-04-03T00:00:00+00:00 (string)

value : Made public. (string)

}

]

providerMetadata : { »

orgId : 53f830b8-0a3f-465b-8143-3b8a9948e749 (string)

shortName : redhat (string)

dateUpdated : 2025-04-03T13:36:50.776Z (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-04-03T14:46:14.850480Z (string)

id : CVE-2025-32051 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-04-03T14:54:07.542Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-32051", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-04-03T14:46:14.850480Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-03T14:46:23.972Z"}}], "cna": {"title": "Libsoup: segmentation fault when parsing malformed data uri", "metrics": [{"other": {"type": "Red Hat severity rating", "content": {"value": "Moderate", "namespace": "https://access.redhat.com/security/updates/classification/"}}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"cpes": ["cpe:/o:redhat:enterprise_linux:6"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", "packageName": "libsoup", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:7"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 7", "packageName": "libsoup", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:8"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "libsoup", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:9"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "libsoup", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}], "timeline": [{"lang": "en", "time": "2025-04-03T01:16:46.979000+00:00", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2025-04-03T00:00:00+00:00", "value": "Made public."}], "datePublic": "2025-04-03T00:00:00.000Z", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2025-32051", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2357068", "name": "RHBZ#2357068", "tags": ["issue-tracking", "x_refsource_REDHAT"]}], "workarounds": [{"lang": "en", "value": "No mitigation is currently available for this vulnerability."}], "descriptions": [{"lang": "en", "value": "A flaw was found in libsoup. The libsoup soup_uri_decode_data_uri() function may crash when processing malformed data URI. This flaw allows an attacker to cause a denial of service (DoS)."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-754", "description": "Improper Check for Unusual or Exceptional Conditions"}]}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2025-04-03T13:36:50.776Z"}, "x_redhatCweChain": "CWE-754: Improper Check for Unusual or Exceptional Conditions"}}, "cveMetadata": {"cveId": "CVE-2025-32051", "state": "PUBLISHED", "dateUpdated": "2025-04-03T14:54:07.542Z", "dateReserved": "2025-04-03T01:42:14.135Z", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "datePublished": "2025-04-03T13:36:50.776Z", "assignerShortName": "redhat"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2025-32051 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-04-03T14:46:14.850480Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-04-03T14:46:23.972Z (string)

}

]

cna : { »

title : Libsoup: segmentation fault when parsing malformed data uri (string)

metrics : [ »

0 : { »

other : { »

type : Red Hat severity rating (string)

content : { »

value : Moderate (string)

namespace : https://access.redhat.com/security/updates/classification/ (string)

}

1 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 5.9 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : HIGH (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : NONE (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:6 (string)

]

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 6 (string)

packageName : libsoup (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

defaultStatus : unknown (string)

}

1 : { »

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:7 (string)

]

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 7 (string)

packageName : libsoup (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

defaultStatus : unknown (string)

}

2 : { »

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:8 (string)

]

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 8 (string)

packageName : libsoup (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

defaultStatus : affected (string)

}

3 : { »

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:9 (string)

]

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 9 (string)

packageName : libsoup (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

defaultStatus : affected (string)

}

]

timeline : [ »

0 : { »

lang : en (string)

time : 2025-04-03T01:16:46.979000+00:00 (string)

value : Reported to Red Hat. (string)

}

1 : { »

lang : en (string)

time : 2025-04-03T00:00:00+00:00 (string)

value : Made public. (string)

}

]

datePublic : 2025-04-03T00:00:00.000Z (string)

references : [ »

0 : { »

url : https://access.redhat.com/security/cve/CVE-2025-32051 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_REDHAT (string)

]

}

1 : { »

url : https://bugzilla.redhat.com/show_bug.cgi?id=2357068 (string)

name : RHBZ#2357068 (string)

tags : [ »

0 : issue-tracking (string)

1 : x_refsource_REDHAT (string)

]

}

]

workarounds : [ »

0 : { »

lang : en (string)

value : No mitigation is currently available for this vulnerability. (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A flaw was found in libsoup. The libsoup soup_uri_decode_data_uri() function may crash when processing malformed data URI. This flaw allows an attacker to cause a denial of service (DoS). (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-754 (string)

description : Improper Check for Unusual or Exceptional Conditions (string)

}

]

}

]

providerMetadata : { »

orgId : 53f830b8-0a3f-465b-8143-3b8a9948e749 (string)

shortName : redhat (string)

dateUpdated : 2025-04-03T13:36:50.776Z (string)

}

x_redhatCweChain : CWE-754: Improper Check for Unusual or Exceptional Conditions (string)

}

cveMetadata : { »

cveId : CVE-2025-32051 (string)

state : PUBLISHED (string)

dateUpdated : 2025-04-03T14:54:07.542Z (string)

dateReserved : 2025-04-03T01:42:14.135Z (string)

assignerOrgId : 53f830b8-0a3f-465b-8143-3b8a9948e749 (string)

datePublished : 2025-04-03T13:36:50.776Z (string)

assignerShortName : redhat (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"cveTags": [], "descriptions": [{"lang": "en", "value": "A flaw was found in libsoup. The libsoup soup_uri_decode_data_uri() function may crash when processing malformed data URI. This flaw allows an attacker to cause a denial of service (DoS)."}, {"lang": "es", "value": "Se encontr\u00f3 una falla en libsoup. La funci\u00f3n soup_uri_decode_data_uri() de libsoup puede bloquearse al procesar una URL de datos mal formada. Esta falla permite a un atacante causar una denegaci\u00f3n de servicio (DoS)."}], "id": "CVE-2025-32051", "lastModified": "2025-04-07T14:18:34.453", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 3.6, "source": "secalert@redhat.com", "type": "Primary"}]}, "published": "2025-04-03T14:15:43.903", "references": [{"source": "secalert@redhat.com", "url": "https://access.redhat.com/security/cve/CVE-2025-32051"}, {"source": "secalert@redhat.com", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2357068"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-754"}], "source": "secalert@redhat.com", "type": "Primary"}]}

{

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : A flaw was found in libsoup. The libsoup soup_uri_decode_data_uri() function may crash when processing malformed data URI. This flaw allows an attacker to cause a denial of service (DoS). (string)

}

1 : { »

lang : es (string)

value : Se encontró una falla en libsoup. La función soup_uri_decode_data_uri() de libsoup puede bloquearse al procesar una URL de datos mal formada. Esta falla permite a un atacante causar una denegación de servicio (DoS). (string)

}

]

id : CVE-2025-32051 (string)

lastModified : 2025-04-07T14:18:34.453 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 5.9 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 2.2 (number)

impactScore : 3.6 (number)

source : secalert@redhat.com (string)

type : Primary (string)

}

]

}

published : 2025-04-03T14:15:43.903 (string)

references : [ »

0 : { »

source : secalert@redhat.com (string)

url : https://access.redhat.com/security/cve/CVE-2025-32051 (string)

}

1 : { »

source : secalert@redhat.com (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2357068 (string)

}

]

sourceIdentifier : secalert@redhat.com (string)

vulnStatus : Awaiting Analysis (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-754 (string)

}

]

source : secalert@redhat.com (string)

type : Primary (string)

}

]

}

Show plain JSON

{"bugzilla": {"description": "libsoup: Segmentation fault when parsing malformed data URI", "id": "2357068", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2357068"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.9", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-754", "details": ["A flaw was found in libsoup. The libsoup soup_uri_decode_data_uri() function may crash when processing malformed data URI. This flaw allows an attacker to cause a denial of service (DoS).", "A flaw was found in libsoup. The libsoup soup_uri_decode_data_uri() function may crash when processing malformed data URI. This flaw allows an attacker to cause a denial of service (DoS)."], "mitigation": {"lang": "en:us", "value": "No mitigation is currently available for this vulnerability."}, "name": "CVE-2025-32051", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "libsoup", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "libsoup", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "libsoup", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "libsoup", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2025-04-03T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2025-32051\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-32051"], "threat_severity": "Moderate"}

{

bugzilla : { »

description : libsoup: Segmentation fault when parsing malformed data URI (string)

id : 2357068 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2357068 (string)

}

csaw : false (boolean)

cvss3 : { »

cvss3_base_score : 5.9 (string)

cvss3_scoring_vector : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

status : draft (string)

}

cwe : CWE-754 (string)

details : [ »

0 : A flaw was found in libsoup. The libsoup soup_uri_decode_data_uri() function may crash when processing malformed data URI. This flaw allows an attacker to cause a denial of service (DoS). (string)

1 : A flaw was found in libsoup. The libsoup soup_uri_decode_data_uri() function may crash when processing malformed data URI. This flaw allows an attacker to cause a denial of service (DoS). (string)

]

mitigation : { »

lang : en:us (string)

value : No mitigation is currently available for this vulnerability. (string)

}

name : CVE-2025-32051 (string)

package_state : [ »

0 : { »

cpe : cpe:/o:redhat:enterprise_linux:6 (string)

fix_state : Out of support scope (string)

package_name : libsoup (string)

product_name : Red Hat Enterprise Linux 6 (string)

}

1 : { »

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

fix_state : Out of support scope (string)

package_name : libsoup (string)

product_name : Red Hat Enterprise Linux 7 (string)

}

2 : { »

cpe : cpe:/o:redhat:enterprise_linux:8 (string)

fix_state : Affected (string)

package_name : libsoup (string)

product_name : Red Hat Enterprise Linux 8 (string)

}

3 : { »

cpe : cpe:/o:redhat:enterprise_linux:9 (string)

fix_state : Affected (string)

package_name : libsoup (string)

product_name : Red Hat Enterprise Linux 9 (string)

}

]

public_date : 2025-04-03T00:00:00Z (string)

references : [ »

0 : https://www.cve.org/CVERecord?id=CVE-2025-32051 https://nvd.nist.gov/vuln/detail/CVE-2025-32051 (string)

]

threat_severity : Moderate (string)

}

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object