CVE-2025-32049 Libsoup: denial of service attack to websocket server
Attackers can cause denial of service in applications using libsoup by sending large WebSocket messages that trigger excessive memory allocation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-32049?
CVE-2025-32049 is a high-severity denial of service vulnerability in Red Hat Enterprise Linux 10, published on 3 Apr 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service (DoS).
Weakness: CWE-770
Which versions are affected by CVE-2025-32049?
How do I fix CVE-2025-32049?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2025-32049 being exploited?
There is no known exploitation of CVE-2025-32049 in the wild and no public exploit code.
Sources
Also known as AZL-59539, AZL-59557, CLSA-2026-1768925986, DEBIAN-CVE-2025-32049, ECHO-c0ac-d14a-83ab, GHSA-fqvp-p5gx-qqhg and 5 more.