The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11110:15 advisory.

    * CVE-2025-4948: fix integer underflow in soup_multipart_new_from_message()
    * CVE-2025-32049: fix Denial of Service attack to websocket server
    * CVE-2025-32914: fix OOB Read through soup_multipart_new_from_message()     CVE(s):
    CVE-2025-32914     A flaw was found in libsoup, where the soup_multipart_new_from_message() function is vulnerable to an out-     of-bounds read. This flaw allows a malicious HTTP client to induce the libsoup server to read out of     bounds.
    CVE-2025-4948     A flaw was found in the soup_multipart_new_from_message() function of the libsoup HTTP library, which is     commonly used by GNOME and other applications to handle web communications. The issue occurs when the     library processes specially crafted multipart messages. Due to improper validation, an internal     calculation can go wrong, leading to an integer underflow. This can cause the program to access invalid     memory and crash. As a result, any application or server using libsoup could be forced to exit     unexpectedly, creating a denial-of-service (DoS) risk.
    CVE-2025-32049     A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may     cause libsoup to allocate memory and lead to a denial of service (DoS).

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MiracleLinux 7 : libsoup-2.62.2-2.0.5.0.1.el7.AXS7 (AXSA:2025-11110:15)

high Nessus Plugin ID 282739

Version 1.2

Version 1.1

Version 1.2 Feb 23, 2026, 1:38 PM New Plugin Feed: 202602231338
Version 1.1 Jan 14, 2026, 5:08 AM New Plugin Feed: 202601140508