A denial-of-service vulnerability exists in the libsoup HTTP client library. It can be triggered when a libsoup client processes a 401 Unauthorized HTTP response containing a specially crafted domain parameter in the WWW-Authenticate header, causing the client application to crash. Exploitation requires tricking a user's application into connecting to a malicious HTTP server controlled by an attacker. The impact is limited to crashing the specific client instance, with no broader system compromise. Red Hat rates this vulnerability as low severity due to the required user interaction and limited impact.