GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. Input received over the network cannot trigger this.

The version of libsoup installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52531 advisory.

  - GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in     soup_header_parse_param_list_strict. Input received over the network cannot trigger this. (CVE-2024-52531)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

CVE-2024-52531

high

Tenable Plugins

high