← All credits

Red Hat would like to thank Codean Labs for reporting this issue.

13 vulnerability records and advisories credit this contributor.

Libsoup: libsoup: header and http request injection via crlf injection

Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames

Gvfs: gvfs ftp backend: information disclosure via untrusted pasv responses

Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure

Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()

Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header

Gvfs: ftp gvfs backend: arbitrary ftp command injection via crlf sequences in file paths

Evolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handling

Libsoup: libsoup: credential leakage via http redirects

Libsoup: libsoup: http header injection or response splitting via crlf injection in content-disposition header