发布于3月6日3月6日 Members Huawei EulerOS: CVE-2024-52530: libsoup security update Severity 4 CVSS (AV:L/AC:M/Au:N/C:P/I:P/A:P) Published 11/11/2024 Created 02/12/2025 Added 02/11/2025 Modified 02/11/2025 Description GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header. Solution(s) huawei-euleros-2_0_sp11-upgrade-libsoup huawei-euleros-2_0_sp11-upgrade-libsoup-help References https://attackerkb.com/topics/cve-2024-52530 CVE - 2024-52530 EulerOS-SA-2025-1160
参与讨论
你可立刻发布并稍后注册。 如果你有帐户，立刻登录发布帖子。