SB2026021362 - SUSE update for libsoup 



SB2026021362 - SUSE update for libsoup

Published: February 13, 2026

Security Bulletin ID SB2026021362
Severity
Critical
Patch available
YES
Number of vulnerabilities 3
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

Critical 33% High 33% Medium 33%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 3 secuirty vulnerabilities.


1) Inconsistent interpretation of HTTP requests (CVE-ID: CVE-2025-14523)

The vulnerability allows a remote attacker to perform HTTP request smuggling attacks.

The vulnerability exists due to improper validation of HTTP requests. libsoup accepts duplicate Host: headers and implements a last-value-wins policy when soup_message_headers_get_one[_common] is used to construct the request URI, while many proxies and routers use the first Host: header for routing. A remote attacker can send a specially crafted HTTP request to the server and smuggle arbitrary HTTP headers.


2) Buffer access with incorrect length value (CVE-ID: CVE-2026-0716)

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to a boundary error in process_frame() function when handling WebSocket frames if a non-default configuration is used where the maximum incoming payload size is unset. A remote attacker can send specially crafted data to the application and execute arbitrary code on the system.


3) Stack-based buffer overflow (CVE-ID: CVE-2026-0719)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in the md4sum() function of libsoup’s NTLM authentication module (SoupAuthNTLM) when handling NTLM authentication requests. A remote attacker can send specially crafted input to the application, trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Remediation

Install update from vendor's website.