Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - libsoup に欠陥が見つかりました。soup_auth_digest_authenticate() が NULL ポインターデリファレンスに対して脆弱です。この問題により、libsoup クライアントがクラッシュする可能性があります。CVE-2025-32910

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

遠端 Azure Linux 3.0 主機上安裝的 libsoup 版本比測試版本舊。因此，此版本會受到 CVE-2025-32910 公告中提及的一個弱點影響。

  - 在 libsoup 中發現一個缺陷 soup_auth_digest_authenticate() 容易受到 NULL 指標解除參照影響。此問題可能造成 libsoup 用戶端損毀。 (CVE-2025-32910)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Debian 11 主機上安裝的多個套件受到 dla-4140 公告中提及的多個弱點影響。

    - ------------------------------------------------- ------------------------------------ Debian LTS 公告 DLA-4140-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/Andreas Henriksson 2025 年 4 月 27 日https://wiki.debian.org/LTS-------------------------------------------------------------------------

    套件：libsoup2.4 版本：2.72.0-2+deb11u2 CVE ID：CVE-2025-2784 CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911 CVE-2025-32912 CVE-2025-32913 CVE-2025-32914 Debian 錯誤：1091502 1102208 1102212 1102214 1102215 1103521 1103517 1103516 1103515 1103267 1103512

    在 GNOME 等中常用的 http 用戶端/伺服器程式庫 libsoup2.4 中發現數個安全性弱點。

    CVE-2025-2784

        套件在透過 skip_insight_whitespace() 函式探查內容時，容易發生堆積緩衝區過度讀取。Libsoup 用戶端可能會讀取一個位元組超出邊界以回應 HTTP 伺服器回應特製 HTTP 回應。

    CVE-2025-32050

        libsoup append_param_quoted() 函式可能包含一個溢位錯誤，進而導致緩衝區讀取不足。

    CVE-2025-32052

        sniff_unknown() 函式中的一個弱點可能導致堆積緩衝區過度讀取。

    CVE-2025-32053

        sniff_feed_or_html() 和 skip_insignificant_space() 函式中的一個弱點可能導致堆積緩衝區過度讀取。

    CVE-2025-32906

        soup_headers_parse_request() 函式可能容易發生超出邊界讀取。此瑕疵可允許惡意使用者使用特製的 HTTP 要求造成 HTTP 伺服器當機。

    CVE-2025-32909

        SoupContentSniffer 可能容易受到 sniff_mp4 函式中的 NULL 指標解除參照影響。HTTP 伺服器可能造成 libsoup 用戶端當機。

    CVE-2025-32910

        在 libsoup 中發現一個瑕疵，其中 soup_auth_digest_authenticate() 容易受到 NULL 指標解除參照影響。此問題可能造成 libsoup 用戶端當機。

    CVE-2025-32911

        容易受到一個 soup_message_headers_get_content_disposition() 函式中不存在於堆積上的釋放後使用記憶體問題影響。
        此瑕疵可允許惡意 HTTP 用戶端在 libsoup 伺服器中造成記憶體損毀。

    CVE-2025-32912

        SoupAuthDigest 容易受到 NULL 指標解除參照影響。HTTP 伺服器可能造成 libsoup 用戶端當機。

    CVE-2025-32913

        soup_message_headers_get_content_disposition() 函式容易受到 NULL 指標解除參照影響。此瑕疵可允許惡意 HTTP 對等端損毀使用此函式的 libsoup 用戶端或伺服器。

    CVE-2025-32914

        soup_multipart_new_from_message() 函式容易受到超出邊界讀取影響。此瑕疵可允許惡意 HTTP 用戶端導致 libsoup 伺服器導致超出邊界讀取。

    此外，此更新也包含一個修正，可延長構建期間測試套件所使用之憑證的壽命，以避免很快過期。

    請注意，此更新*尚未* 解決仍在討論階段的 CVE-2025-32907 和 CVE-2025-32049。

    針對 Debian 11 Bullseye，這些問題已在 2.72.0-2+deb11u2 版本中修正。

    我們建議您升級 libsoup2.4 套件。

    如需瞭解有關 libsoup2.4 詳細的安全性狀態，請參閱其安全追蹤頁面：
    https://security-tracker.debian.org/tracker/libsoup2.4

    有關 Debian LTS 安全公告、如何將這些更新套用至您的系統以及常見問題的詳細資訊，請參閱: https://wiki.debian.org/LTSAttachment:signature.ascDescription: PGP 簽章

Tenable 已直接從 Debian 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Redhat Enterprise Linux 8 主機上安裝的套件受到 RHSA-2025:8292 公告中提及的多個弱點影響。

    MinGW Windows Freetype 程式庫。

    安全性修正：

    * freetype：嘗試剖析與 TrueType GX 和變數字型檔案相關的字型副字符結構時，存在 OOB 寫入 (CVE-2025-27363)

    * libsoup：append_param_quoted 中的整數溢位 (CVE-2025-32050)

    * libsoup：sniff_unknown() 中的堆積緩衝區溢位 (CVE-2025-32052)

    * libsoup：sniff_feed_or_html() 和 skip_insignificant_space() 中的堆積緩衝區溢位 (CVE-2025-32053)

    * libsoup： soup_headers_parse_request() 中的超出邊界讀取 (CVE-2025-32906)

    * libsoup：用戶端要求具有 Range 標頭的大量重疊範圍時，伺服器中發生拒絕服務 (CVE-2025-32907)

    * libsoup透過 soup-content-sniffer.c 中的 sniff_mp4 函式在 libsoup 上發生 NULL 指標解除參照 (CVE-2025-32909)

    * libsoup當伺服器在使用摘要式驗證的未經授權回應中省略 realm 參數時會透過 /auth/soup-auth-digest.c 至 用戶端上的 soup_auth_digest_authenticate 在 libsoup 上解除參照 (CVE-2025-32910)

    * libsoup：透過 params GHashTable 值，在透過 soup-message-headers.c 的 soup_message_headers_get_content_disposition() 上重複釋放 (CVE-2025-32911)

    * libsoup：當 filename 參數存在，但在 Content-Disposition 標頭中沒有值時， soup_message_headers_get_content_disposition 中發生 NULL 指標解除參照 (CVE-2025-32913)

    如需安全性問題的詳細資料，包括影響、CVSS 分數、致謝及其他相關資訊，請參閱〈參照〉一節列出的 CVE 頁面。

Tenable 已直接從 Red Hat Enterprise Linux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 RockyLinux 8 主機已安裝受到多個弱點影響的套件如 RLSA-2025:8292 公告中所提及。

    * freetype：嘗試剖析與 TrueType GX 和變數字型檔案相關的字型副字符結構時，存在 OOB 寫入 (CVE-2025-27363)

    * libsoup：append_param_quoted 中的整數溢位 (CVE-2025-32050)

    * libsoup：sniff_unknown() 中的堆積緩衝區溢位 (CVE-2025-32052)

    * libsoup：sniff_feed_or_html() 和 skip_insignificant_space() 中的堆積緩衝區溢位 (CVE-2025-32053)

    * libsoup： soup_headers_parse_request() 中的超出邊界讀取 (CVE-2025-32906)

    * libsoup：用戶端要求具有 Range 標頭的大量重疊範圍時，伺服器中發生拒絕服務 (CVE-2025-32907)

    * libsoup透過 soup-content-sniffer.c 中的 sniff_mp4 函式在 libsoup 上發生 NULL 指標解除參照 (CVE-2025-32909)

    * libsoup當伺服器在使用摘要式驗證的未經授權回應中省略 realm 參數時會透過 /auth/soup-auth-digest.c 至 用戶端上的 soup_auth_digest_authenticate 在 libsoup 上解除參照 (CVE-2025-32910)

    * libsoup：透過 params GHashTable 值，在透過 soup-message-headers.c 的 soup_message_headers_get_content_disposition() 上重複釋放 (CVE-2025-32911)

    * libsoup：當 filename 參數存在，但在 Content-Disposition 標頭中沒有值時， soup_message_headers_get_content_disposition 中發生 NULL 指標解除參照 (CVE-2025-32913)

Tenable 已直接從 RockyLinux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 libsoup 中發現一個缺陷 soup_auth_digest_authenticate() 容易受到 NULL 指標解除參照影響。此問題可能會造成 libsoup 用戶端當機。 (CVE-2025-32910)

請注意，Nessus 依賴供應商報告的套件存在。

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01864-1 advisory.

    - CVE-2025-4948: Fixed integer underflow in soup_multipart_new_from_message() leading to denial of service     (bsc#1243332)
    - CVE-2025-4969: Fixed off-by-one out-of-bounds read may lead to infoleak (bsc#1243423)
    - CVE-2025-32906: Fixed out of bounds reads in soup_headers_parse_request() (bsc#1241263)
    - CVE-2025-32909: Fixed NULL pointer dereference in the sniff_mp4 function in soup-content-sniffer.c     (bsc#1241226)
    - CVE-2025-32910: Fixed null pointer deference on client when server omits the realm parameter in an     Unauthorized response with Digest authentication (bsc#1241252)
    - CVE-2025-32911: Fixed double free on soup_message_headers_get_content_disposition() via 'params'.
    (bsc#1241238)
    - CVE-2025-32912: Fixed NULL pointer dereference in SoupAuthDigest (bsc#1241214)
    - CVE-2025-32913: Fixed NULL pointer dereference in soup_message_headers_get_content_disposition     (bsc#1241162)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01794-1 advisory.

    - CVE-2025-4948: Fixed integer underflow in soup_multipart_new_from_message() leading to denial of service     (bsc#1243332)
    - CVE-2025-4969: Fixed off-by-one out-of-bounds read may lead to infoleak (bsc#1243423)
    - CVE-2025-32906: Fixed out of bounds reads in soup_headers_parse_request() (bsc#1241263)
    - CVE-2025-32909: Fixed NULL pointer dereference in the sniff_mp4 function in soup-content-sniffer.c     (bsc#1241226)
    - CVE-2025-32910: Fixed null pointer deference on client when server omits the realm parameter in an     Unauthorized response with Digest authentication (bsc#1241252)
    - CVE-2025-32911: Fixed double free on soup_message_headers_get_content_disposition() via 'params'.
    (bsc#1241238)
    - CVE-2025-32912: Fixed NULL pointer dereference in SoupAuthDigest (bsc#1241214)
    - CVE-2025-32913: Fixed NULL pointer dereference in soup_message_headers_get_content_disposition     (bsc#1241162)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of libsoup installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32910 advisory.

  - A flaw was found in libsoup, where soup_auth_digest_authenticate() is vulnerable to a NULL pointer     dereference. This issue May cause the libsoup client to crash. (CVE-2025-32910)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the libsoup package has been released.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4140 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4140-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                   Andreas Henriksson     April 27, 2025                                https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : libsoup2.4     Version        : 2.72.0-2+deb11u2     CVE ID         : CVE-2025-2784 CVE-2025-32050 CVE-2025-32052 CVE-2025-32053                      CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32911                      CVE-2025-32912 CVE-2025-32913 CVE-2025-32914     Debian Bug     : 1091502 1102208 1102212 1102214 1102215 1103521 1103517                      1103516 1103515 1103267 1103512

    Several security vulnerabilities have been discovered in libsoup2.4, a http     client/server library popularly used in GNOME, et.al.

    CVE-2025-2784

        The package is vulnerable to a heap buffer over-read when sniffing content         via the skip_insight_whitespace() function. Libsoup clients may read one         byte out-of-bounds in response to a crafted HTTP response by an HTTP         server.

    CVE-2025-32050

        The libsoup append_param_quoted() function may contain an overflow bug         resulting in a buffer under-read.

    CVE-2025-32052

        A vulnerability in the sniff_unknown() function may lead to heap buffer         over-read.

    CVE-2025-32053

        A vulnerability in sniff_feed_or_html() and skip_insignificant_space()         functions may lead to a heap buffer over-read.

    CVE-2025-32906

        The soup_headers_parse_request() function may be vulnerable to an         out-of-bound read. This flaw allows a malicious user to use a specially         crafted HTTP request to crash the HTTP server.

    CVE-2025-32909

        SoupContentSniffer may be vulnerable to a NULL pointer dereference in the         sniff_mp4 function. The HTTP server may cause the libsoup client to crash.

    CVE-2025-32910

        A flaw was found in libsoup, where soup_auth_digest_authenticate() is         vulnerable to a NULL pointer dereference. This issue may cause the libsoup         client to crash.

    CVE-2025-32911

        Vulnerable to a use-after-free memory issue not on the heap in the         soup_message_headers_get_content_disposition() function.
        This flaw allows a malicious HTTP client to cause memory corruption in the         libsoup server.

    CVE-2025-32912

        SoupAuthDigest is vulnerable to a NULL pointer dereference. The HTTP server         may cause the libsoup client to crash.

    CVE-2025-32913

        The soup_message_headers_get_content_disposition() function is vulnerable         to a NULL pointer dereference. This flaw allows a malicious HTTP peer to         crash a libsoup client or server that uses this function.

    CVE-2025-32914

        The soup_multipart_new_from_message() function is vulnerable to an         out-of-bounds read. This flaw allows a malicious HTTP client to induce the         libsoup server to read out of bounds.

    Additionally this update also includes a fix to extend the lifetime     of a certificate used by the test-suite during build to avoid     expiring soon.

    Note that this update does *not* yet address CVE-2025-32907 and CVE-2025-32049     which are still being discussed.

    For Debian 11 bullseye, these problems have been fixed in version     2.72.0-2+deb11u2.

    We recommend that you upgrade your libsoup2.4 packages.

    For the detailed security status of libsoup2.4 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/libsoup2.4

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in libsoup. A vulnerability in sniff_feed_or_html() and skip_insignificant_space()     functions may lead to a heap buffer over-read.(CVE-2025-32053)

    A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-     read.(CVE-2025-32052)

    A flaw was found in libsoup, where soup_auth_digest_authenticate() is vulnerable to a NULL pointer     dereference. This issue may cause the libsoup client to crash.(CVE-2025-32910)

    A use-after-free type vulnerability was found in libsoup, in the     soup_message_headers_get_content_disposition() function. This flaw allows a malicious HTTP client to cause     memory corruption in the libsoup server.(CVE-2025-32911)

    A flaw was found in libsoup, where SoupAuthDigest is vulnerable to a NULL pointer dereference. The HTTP     server may cause the libsoup client to crash.(CVE-2025-32912)

    A flaw was found in libsoup. The implementation of HTTP range requests is vulnerable to a resource     consumption attack. This flaw allows a malicious client to request the same range many times in a single     HTTP request, causing the server to use large amounts of memory. This does not allow for a full denial of     service.(CVE-2025-32907)

    A flaw was found in libsoup, where the soup_headers_parse_request() function may be vulnerable to an out-     of-bound read. This flaw allows a malicious user to use a specially crafted HTTP request to crash the HTTP     server.(CVE-2025-32906)

    A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the     sniff_mp4 function. The HTTP server may cause the libsoup client to crash.(CVE-2025-32909)

    A flaw was found in libsoup, where the soup_message_headers_get_content_disposition() function is     vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client     or server that uses this function.(CVE-2025-32913)

    A flaw was found in libsoup, where the soup_multipart_new_from_message() function is vulnerable to an out-     of-bounds read. This flaw allows a malicious HTTP client to induce the libsoup server to read out of     bounds.(CVE-2025-32914)

    A flaw was found in libsoup. The libsoup append_param_quoted() function may contain an overflow bug     resulting in a buffer under-read.(CVE-2025-32050)

    A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content     via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to     a crafted HTTP response by an HTTP server.(CVE-2025-2784)

    A flaw was found in libsoup. It is vulnerable to memory leaks in the soup_header_parse_quality_list()     function when parsing a quality list that contains elements with all zeroes.(CVE-2025-46420)

    A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the     HTTP Authorization header to the new host that the redirection points to. This allows the new host to     impersonate the user to the original host that issued the redirect.(CVE-2025-46421)

    A flaw was found in the soup_multipart_new_from_message() function of the libsoup HTTP library, which is     commonly used by GNOME and other applications to handle web communications. The issue occurs when the     library processes specially crafted multipart messages. Due to improper validation, an internal     calculation can go wrong, leading to an integer underflow. This can cause the program to access invalid     memory and crash. As a result, any application or server using libsoup could be forced to exit     unexpectedly, creating a denial-of-service (DoS) risk.(CVE-2025-4948)

    A vulnerability was found in the libsoup package. This flaw stems from its failure to correctly verify the     termination of multipart HTTP messages. This can allow a remote attacker to send a specially crafted     multipart HTTP body, causing the libsoup-consuming server to read beyond its allocated memory boundaries     (out-of-bounds read).(CVE-2025-4969)

Tenable has extracted the preceding description block directly from the EulerOS libsoup security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:8292 advisory.

    MinGW Windows Freetype library.

    Security Fix(es):

    * freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and     variable font files (CVE-2025-27363)

    * libsoup: Integer overflow in append_param_quoted (CVE-2025-32050)

    * libsoup: Heap buffer overflow in sniff_unknown() (CVE-2025-32052)

    * libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (CVE-2025-32053)

    * libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906)

    * libsoup: Denial of service in server when client requests a large amount of  overlapping ranges with     Range header (CVE-2025-32907)

    * libsoup: NULL Pointer Dereference on libsoup through  function sniff_mp4 in soup-content-sniffer.c     (CVE-2025-32909)

    * libsoup: Null pointer deference on libsoup via  /auth/soup-auth-digest.c through     soup_auth_digest_authenticate on  client when server omits the realm parameter in an Unauthorized     response with Digest authentication (CVE-2025-32910)

    * libsoup: Double free on  soup_message_headers_get_content_disposition() through  soup-message-     headers.c via params GHashTable value (CVE-2025-32911)

    * libsoup: NULL pointer dereference in  soup_message_headers_get_content_disposition when filename     parameter  is present, but has no value in Content-Disposition header (CVE-2025-32913)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:8292 advisory.

    * freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and     variable font files (CVE-2025-27363)

    * libsoup: Integer overflow in append_param_quoted (CVE-2025-32050)

    * libsoup: Heap buffer overflow in sniff_unknown() (CVE-2025-32052)

    * libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (CVE-2025-32053)

    * libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906)

    * libsoup: Denial of service in server when client requests a large amount of  overlapping ranges with     Range header (CVE-2025-32907)

    * libsoup: NULL Pointer Dereference on libsoup through  function sniff_mp4 in soup-content-sniffer.c     (CVE-2025-32909)

    * libsoup: Null pointer deference on libsoup via  /auth/soup-auth-digest.c through     soup_auth_digest_authenticate on  client when server omits the realm parameter in an Unauthorized     response with Digest authentication (CVE-2025-32910)

    * libsoup: Double free on  soup_message_headers_get_content_disposition() through  soup-message-     headers.c via params GHashTable value (CVE-2025-32911)

    * libsoup: NULL pointer dereference in  soup_message_headers_get_content_disposition when filename     parameter  is present, but has no value in Content-Disposition header (CVE-2025-32913)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in libsoup, where soup_auth_digest_authenticate() is vulnerable to a NULL pointer     dereference. This issue may cause the libsoup client to crash. (CVE-2025-32910)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名稱	產品	系列	已發布	已更新	嚴重性
245533	Linux Distros のパッチ未適用の脆弱性: CVE-2025-32910	Nessus	Misc.	2025/8/7	2025/8/22	medium
241953	Azure Linux 3.0 安全性更新libsoup (CVE-2025-32910)	Nessus	Azure Linux Local Security Checks	2025/7/11	2025/7/11	medium
234885	Debian dla-4140：gir1.2-soup-2.4 - 安全性更新	Nessus	Debian Local Security Checks	2025/4/27	2025/4/27	critical
237452	RHEL 8mingw-freetype 和 spice-client-win (RHSA-2025:8292)	Nessus	Red Hat Local Security Checks	2025/5/29	2025/6/5	high
243060	RockyLinux 8mingw-freetype 與 spice-client-win (RLSA-2025:8292)	Nessus	Rocky Linux Local Security Checks	2025/7/30	2025/7/30	high
245533	Linux Distros 未修補的弱點：CVE-2025-32910	Nessus	Misc.	2025/8/7	2025/8/22	medium
240784	SUSE SLES15 Security Update : libsoup2 (SUSE-SU-2025:01864-1)	Nessus	SuSE Local Security Checks	2025/6/27	2025/6/27	medium
237697	SUSE SLES12 Security Update : libsoup (SUSE-SU-2025:01794-1)	Nessus	SuSE Local Security Checks	2025/6/3	2025/6/3	medium
241953	Azure Linux 3.0 Security Update: libsoup (CVE-2025-32910)	Nessus	Azure Linux Local Security Checks	2025/7/11	2025/7/11	medium
236799	Photon OS 5.0: Libsoup PHSA-2025-5.0-0522	Nessus	PhotonOS Local Security Checks	2025/5/15	2025/5/15	medium
234885	Debian dla-4140 : gir1.2-soup-2.4 - security update	Nessus	Debian Local Security Checks	2025/4/27	2025/4/27	critical
242459	EulerOS 2.0 SP12 : libsoup (EulerOS-SA-2025-1829)	Nessus	Huawei Local Security Checks	2025/7/21	2025/7/21	medium
237452	RHEL 8 : mingw-freetype and spice-client-win (RHSA-2025:8292)	Nessus	Red Hat Local Security Checks	2025/5/29	2025/6/5	high
243060	RockyLinux 8 : mingw-freetype and spice-client-win (RLSA-2025:8292)	Nessus	Rocky Linux Local Security Checks	2025/7/30	2025/7/30	high
245533	Linux Distros Unpatched Vulnerability : CVE-2025-32910	Nessus	Misc.	2025/8/7	2025/8/22	medium

偵測

搜尋 Plugin

medium

medium

critical

high

high

medium

medium

medium

medium

medium

critical

medium

high

high

medium