Improper Handling of Case Sensitivity in Red Hat Red Hat Enterprise Linux 10 (CVE-2025-4035)
Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago. Security Fix(es): * libsoup: Denial of Service attack to websocket server (CVE-2025-32049) * libsoup: Denial of service in server when client requests a large amount of overlapping ranges with Range header (CVE-2025-32907) * libsoup: Cookie domain validation bypass via uppercase characters in libsoup (CVE-2025-4035) * libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup (CVE-2025-4948) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
AI Analysis
Technical Summary
Libsoup3, a C-based HTTP library designed for asynchronous network access in GTK applications, has several security flaws. These include CVE-2025-32049 (DoS via websocket server), CVE-2025-32907 (DoS from large overlapping Range header requests), CVE-2025-4035 (cookie domain validation bypass using uppercase characters), and CVE-2025-4948 (integer underflow in soup_multipart_new_from_message() causing DoS). Red Hat's advisory RHSA-2025:8128 provides updates for Red Hat Enterprise Linux 10 and related CodeReady Linux Builder products to mitigate these vulnerabilities.
Potential Impact
The vulnerabilities can lead to denial of service conditions on servers using libsoup3, potentially disrupting service availability. The cookie domain validation bypass could allow improper cookie acceptance, which may affect security policies relying on domain validation. No known exploits in the wild have been reported. The overall security impact is rated as important by Red Hat.
Mitigation Recommendations
Red Hat has released security updates for libsoup3 in Red Hat Enterprise Linux 10 and associated products. Users should apply the updates as described in Red Hat advisory RHSA-2025:8128 and the referenced article https://access.redhat.com/articles/11258 to remediate these vulnerabilities. Since official fixes are available, applying these patches is the recommended mitigation.
Improper Handling of Case Sensitivity in Red Hat Red Hat Enterprise Linux 10 (CVE-2025-4035)
Description
Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago. Security Fix(es): * libsoup: Denial of Service attack to websocket server (CVE-2025-32049) * libsoup: Denial of service in server when client requests a large amount of overlapping ranges with Range header (CVE-2025-32907) * libsoup: Cookie domain validation bypass via uppercase characters in libsoup (CVE-2025-4035) * libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup (CVE-2025-4948) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS v3.1
Score 4.3medium
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Libsoup3, a C-based HTTP library designed for asynchronous network access in GTK applications, has several security flaws. These include CVE-2025-32049 (DoS via websocket server), CVE-2025-32907 (DoS from large overlapping Range header requests), CVE-2025-4035 (cookie domain validation bypass using uppercase characters), and CVE-2025-4948 (integer underflow in soup_multipart_new_from_message() causing DoS). Red Hat's advisory RHSA-2025:8128 provides updates for Red Hat Enterprise Linux 10 and related CodeReady Linux Builder products to mitigate these vulnerabilities.
Potential Impact
The vulnerabilities can lead to denial of service conditions on servers using libsoup3, potentially disrupting service availability. The cookie domain validation bypass could allow improper cookie acceptance, which may affect security policies relying on domain validation. No known exploits in the wild have been reported. The overall security impact is rated as important by Red Hat.
Mitigation Recommendations
Red Hat has released security updates for libsoup3 in Red Hat Enterprise Linux 10 and associated products. Users should apply the updates as described in Red Hat advisory RHSA-2025:8128 and the referenced article https://access.redhat.com/articles/11258 to remediate these vulnerabilities. Since official fixes are available, applying these patches is the recommended mitigation.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:8128
- Cve Count
- 4
- Additional Cves
- ["CVE-2025-4948","CVE-2025-32049","CVE-2025-32907"]
Threat ID: 6a3ef7dc27e9c79719020b5f
Added to database: 06/26/2026, 22:06:20 UTC
Last enriched: 06/26/2026, 22:40:59 UTC
Last updated: 09/10/2026, 19:36:50 UTC
Views: 88
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.