A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of memory contents, potentially exposing sensitive information from the process using libsoup.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:20959 advisory.

    * libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup (CVE-2025-4945)
      * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21772 advisory.

    The libsoup packages provide an HTTP client and server library for GNOME.

    Security Fix(es):

    * libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup (CVE-2025-4945)

    * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21666 advisory.

    The libsoup packages provide an HTTP client and server library for GNOME.

    Security Fix(es):

    * libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup (CVE-2025-4945)

    * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21665 advisory.

    The libsoup packages provide an HTTP client and server library for GNOME.

    Security Fix(es):

    * libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup (CVE-2025-4945)

    * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21657 advisory.

    The libsoup packages provide an HTTP client and server library for GNOME.

    Security Fix(es):

    * libsoup: Heap buffer over-read in `skip_insignificant_space` when sniffing content (CVE-2025-2784)

    * libsoup: Denial of Service attack to websocket server (CVE-2025-32049)

    * libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906)

    * libsoup: Double free on  soup_message_headers_get_content_disposition() through  soup-message-     headers.c via params GHashTable value (CVE-2025-32911)

    * libsoup: NULL pointer dereference in  soup_message_headers_get_content_disposition when filename     parameter  is present, but has no value in Content-Disposition header (CVE-2025-32913)

    * libsoup: OOB Read on libsoup through function  soup_multipart_new_from_message in soup-multipart.c     leads to crash or  exit of process (CVE-2025-32914)

    * libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup (CVE-2025-4945)

    * libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup     (CVE-2025-4948)

    * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21664 advisory.

    The libsoup packages provide an HTTP client and server library for GNOME.

    Security Fix(es):

    * libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup (CVE-2025-4945)

    * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21655 advisory.

    The libsoup packages provide an HTTP client and server library for GNOME.

    Security Fix(es):

    * libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup (CVE-2025-4945)

    * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21656 advisory.

    The libsoup packages provide an HTTP client and server library for GNOME.

    Security Fix(es):

    * libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup (CVE-2025-4945)

    * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0176 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2025-11021:
    A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and     other applications for web communication. When processing cookies with specially crafted expiration dates,     the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of     memory contents, potentially exposing sensitive information from the process using libsoup.

    CVE-2025-4945:
    A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and     other software. The vulnerability arises when processing the expiration date of cookies, where a specially     crafted value can trigger an integer overflow. This may result in undefined behavior, allowing an attacker     to bypass cookie expiration logic, causing persistent or unintended cookie behavior. The issue stems from     improper validation of large integer inputs during date arithmetic operations within the cookie parsing     routines.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21032 advisory.

    Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access     Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate     packages.  libsoup uses the Glib main loop and is designed to work well with GTK applications. This     enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion,     very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who     want it), but the SOAP parts were removed long ago.

    Security Fix(es):

    * libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup (CVE-2025-4945)

    * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:20959 advisory.

    The libsoup packages provide an HTTP client and server library for GNOME.

    Security Fix(es):

    * libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup (CVE-2025-4945)

    * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:19713 advisory.

    * libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup (CVE-2025-4945)

    * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:19714 advisory.

    * libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup (CVE-2025-4945)
      * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19714 advisory.

    [2.62.3-10]
    - Backport patch for CVE-2025-4945 and CVE-2025-11021

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19713 advisory.

    - Backport patch for CVE-2025-4945 and CVE-2025-11021

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:19714 advisory.

    * libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup (CVE-2025-4945)

    * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:19713 advisory.

    The libsoup packages provide an HTTP client and server library for GNOME.

    Security Fix(es):

    * libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup (CVE-2025-4945)

    * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:19714 advisory.

    The libsoup packages provide an HTTP client and server library for GNOME.

    Security Fix(es):

    * libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup (CVE-2025-4945)

    * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the libsoup package has been released.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:3753-1 advisory.

    - CVE-2025-11021: Ignored invalid date when processing cookies to prevent out-of-bounds read     (bsc#1250562).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:3752-1 advisory.

    - CVE-2025-11021: Ignored invalid date when processing cookies to prevent out-of-bounds read     (bsc#1250562).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:18183 advisory.

    * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-18183 advisory.

    - Fix handling of invalid dates in cookie expires attribute       (CVE-2025-11021)
    - Add patch for CVE-2025-32907

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:18183 advisory.

    * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:18183 advisory.

    Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access     Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate     packages.  libsoup uses the Glib main loop and is designed to work well with GTK applications. This     enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion,     very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who     want it), but the SOAP parts were removed long ago.

    Security Fix(es):

    * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and     other applications for web communication. When processing cookies with specially crafted expiration dates,     the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of     memory contents, potentially exposing sensitive information from the process using libsoup.
    (CVE-2025-11021)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
275819	AlmaLinux 9 : libsoup (ALSA-2025:20959)	Nessus	Alma Linux Local Security Checks	high
275791	RHEL 8 : libsoup (RHSA-2025:21772)	Nessus	Red Hat Local Security Checks	high
275712	RHEL 9 : libsoup (RHSA-2025:21666)	Nessus	Red Hat Local Security Checks	high
275709	RHEL 8 : libsoup (RHSA-2025:21665)	Nessus	Red Hat Local Security Checks	high
275607	RHEL 7 : libsoup (RHSA-2025:21657)	Nessus	Red Hat Local Security Checks	medium
275606	RHEL 8 : libsoup (RHSA-2025:21664)	Nessus	Red Hat Local Security Checks	high
275605	RHEL 9 : libsoup (RHSA-2025:21655)	Nessus	Red Hat Local Security Checks	high
275604	RHEL 9 : libsoup (RHSA-2025:21656)	Nessus	Red Hat Local Security Checks	high
275562	Alibaba Cloud Linux 3 : 0176: libsoup (ALINUX3-SA-2025:0176)	Nessus	Alibaba Cloud Linux Local Security Checks	high
274828	RHEL 10 : libsoup3 (RHSA-2025:21032)	Nessus	Red Hat Local Security Checks	high
274820	RHEL 9 : libsoup (RHSA-2025:20959)	Nessus	Red Hat Local Security Checks	high
274593	RockyLinux 9 : libsoup (RLSA-2025:19713)	Nessus	Rocky Linux Local Security Checks	high
274511	AlmaLinux 8 : libsoup (ALSA-2025:19714)	Nessus	Alma Linux Local Security Checks	high
274354	Oracle Linux 8 : libsoup (ELSA-2025-19714)	Nessus	Oracle Linux Local Security Checks	high
274077	Oracle Linux 9 : libsoup (ELSA-2025-19713)	Nessus	Oracle Linux Local Security Checks	high
272307	RockyLinux 8 : libsoup (RLSA-2025:19714)	Nessus	Rocky Linux Local Security Checks	high
272284	RHEL 9 : libsoup (RHSA-2025:19713)	Nessus	Red Hat Local Security Checks	high
272282	RHEL 8 : libsoup (RHSA-2025:19714)	Nessus	Red Hat Local Security Checks	high
272272	Photon OS 5.0: Libsoup PHSA-2025-5.0-0666	Nessus	PhotonOS Local Security Checks	medium
271408	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libsoup (SUSE-SU-2025:3753-1)	Nessus	SuSE Local Security Checks	high
271369	SUSE SLES15 Security Update : libsoup (SUSE-SU-2025:3752-1)	Nessus	SuSE Local Security Checks	high
270757	RockyLinux 10 : libsoup3 (RLSA-2025:18183)	Nessus	Rocky Linux Local Security Checks	high
270665	Oracle Linux 10 : libsoup3 (ELSA-2025-18183)	Nessus	Oracle Linux Local Security Checks	high
270658	AlmaLinux 10 : libsoup3 (ALSA-2025:18183)	Nessus	Alma Linux Local Security Checks	high
270626	RHEL 10 : libsoup3 (RHSA-2025:18183)	Nessus	Red Hat Local Security Checks	high
266122	Linux Distros Unpatched Vulnerability : CVE-2025-11021	Nessus	Misc.	high

Detections

Analytics

CVE-2025-11021

high

Tenable Plugins

high

high

high

high

medium

high

high

high

high

high

high

high

high

high

high

high

high

high

medium

high

high

high

high

high

high

high