CVE-2026-0719 Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication
A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication. When processing extremely long passwords, an internal size calculation can overflow due to improper use of signed integers. This results in incorrect memory allocation on the stack, followed by unsafe memory copying. As a result, applications using libsoup may crash unexpectedly, creating a denial-of-service risk.
Problem types: cwe_id: CWE-121
description: Stack-based Buffer Overflow
Affected products: vendor: Red Hat
product: Red Hat Enterprise Linux 10
cpes: cpe:/o:redhat:enterprise_linux:10.1
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 10.0 Extended Update Support
cpes: cpe:/o:redhat:enterprise_linux_eus:10.0
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 7 Extended Lifecycle Support
cpes: cpe:/o:redhat:rhel_els:7
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 8
cpes: cpe:/a:redhat:enterprise_linux:8::appstream
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8::baseos
cpe:/a:redhat:enterprise_linux:8::appstream
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8::baseos
cpe:/a:redhat:enterprise_linux:8::appstream
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 8.2 Advanced Update Support
cpes: cpe:/o:redhat:rhel_aus:8.2::baseos
cpe:/a:redhat:rhel_aus:8.2::appstream
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 8.2 Advanced Update Support
cpes: cpe:/a:redhat:rhel_aus:8.2::appstream
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
cpes: cpe:/a:redhat:rhel_aus:8.4::appstream
cpe:/o:redhat:rhel_eus_long_life:8.4::baseos
cpe:/a:redhat:rhel_eus_long_life:8.4::appstream
cpe:/o:redhat:rhel_aus:8.4::baseos
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
cpes: cpe:/a:redhat:rhel_aus:8.4::appstream
cpe:/a:redhat:rhel_eus_long_life:8.4::appstream
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
cpes: cpe:/a:redhat:rhel_aus:8.4::appstream
cpe:/o:redhat:rhel_eus_long_life:8.4::baseos
cpe:/a:redhat:rhel_eus_long_life:8.4::appstream
cpe:/o:redhat:rhel_aus:8.4::baseos
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
cpes: cpe:/a:redhat:rhel_aus:8.4::appstream
cpe:/a:redhat:rhel_eus_long_life:8.4::appstream
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
cpes: cpe:/a:redhat:rhel_e4s:8.6::appstream
cpe:/a:redhat:rhel_aus:8.6::appstream
cpe:/o:redhat:rhel_e4s:8.6::baseos
cpe:/a:redhat:rhel_tus:8.6::appstream
cpe:/o:redhat:rhel_tus:8.6::baseos
cpe:/o:redhat:rhel_aus:8.6::baseos
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
cpes: cpe:/a:redhat:rhel_e4s:8.6::appstream
cpe:/a:redhat:rhel_aus:8.6::appstream
cpe:/a:redhat:rhel_tus:8.6::appstream
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 8.6 Telecommunications Update Service
cpes: cpe:/a:redhat:rhel_e4s:8.6::appstream
cpe:/a:redhat:rhel_aus:8.6::appstream
cpe:/o:redhat:rhel_e4s:8.6::baseos
cpe:/a:redhat:rhel_tus:8.6::appstream
cpe:/o:redhat:rhel_tus:8.6::baseos
cpe:/o:redhat:rhel_aus:8.6::baseos
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 8.6 Telecommunications Update Service
cpes: cpe:/a:redhat:rhel_e4s:8.6::appstream
cpe:/a:redhat:rhel_aus:8.6::appstream
cpe:/a:redhat:rhel_tus:8.6::appstream
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
cpes: cpe:/a:redhat:rhel_e4s:8.6::appstream
cpe:/a:redhat:rhel_aus:8.6::appstream
cpe:/o:redhat:rhel_e4s:8.6::baseos
cpe:/a:redhat:rhel_tus:8.6::appstream
cpe:/o:redhat:rhel_tus:8.6::baseos
cpe:/o:redhat:rhel_aus:8.6::baseos
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
cpes: cpe:/a:redhat:rhel_e4s:8.6::appstream
cpe:/a:redhat:rhel_aus:8.6::appstream
cpe:/a:redhat:rhel_tus:8.6::appstream
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 8.8 Telecommunications Update Service
cpes: cpe:/o:redhat:rhel_e4s:8.8::baseos
cpe:/o:redhat:rhel_tus:8.8::baseos
cpe:/a:redhat:rhel_tus:8.8::appstream
cpe:/a:redhat:rhel_e4s:8.8::appstream
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 8.8 Telecommunications Update Service
cpes: cpe:/a:redhat:rhel_tus:8.8::appstream
cpe:/a:redhat:rhel_e4s:8.8::appstream
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
cpes: cpe:/o:redhat:rhel_e4s:8.8::baseos
cpe:/o:redhat:rhel_tus:8.8::baseos
cpe:/a:redhat:rhel_tus:8.8::appstream
cpe:/a:redhat:rhel_e4s:8.8::appstream
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
cpes: cpe:/a:redhat:rhel_tus:8.8::appstream
cpe:/a:redhat:rhel_e4s:8.8::appstream
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/a:redhat:enterprise_linux:9::appstream
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
cpes: cpe:/a:redhat:rhel_e4s:9.0::appstream
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
cpes: cpe:/a:redhat:rhel_e4s:9.2::appstream
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 9.4 Extended Update Support
cpes: cpe:/a:redhat:rhel_eus:9.4::appstream
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 9.6 Extended Update Support
cpes: cpe:/a:redhat:rhel_eus:9.6::appstream
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Dev Spaces (RHOSDS) 3.26
cpes: cpe:/a:redhat:openshift_devspaces:3.26::el9
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Dev Spaces (RHOSDS) 3.26
cpes: cpe:/a:redhat:openshift_devspaces:3.26::el9
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Dev Spaces (RHOSDS) 3.26
cpes: cpe:/a:redhat:openshift_devspaces:3.26::el9
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 6
cpes: cpe:/o:redhat:enterprise_linux:6
default_status: unknown
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.6
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
version: 3.1
Credits: lang: en
value: Red Hat would like to thank treeplus for reporting this issue.
Published: 2026-01-08T12:38:30.740Z