CVE-2025-4945 Libsoup: integer overflow in cookie expiration date handling in libsoup
An integer overflow in libsoup cookie parsing allows attackers to bypass expiration logic, leading to persistent or unintended cookie behavior.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-4945?
CVE-2025-4945 is a low-severity vulnerability in Red Hat Enterprise Linux 10, published on 19 May 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior, allowing an attacker to bypass cookie expiration logic, causing persistent or unintended cookie behavior. The issue stems from improper validation of large integer inputs during date arithmetic operations within the cookie parsing routines.
Weakness: CWE-190
Which versions are affected by CVE-2025-4945?
Linux distribution packages (19)
libsoup3 Red Hat:enterprise_linux:10.0 | All versions | 0:3.6.5-3.el10_0.9 |
libsoup3-debuginfo Red Hat:enterprise_linux:10.0 | All versions | 0:3.6.5-3.el10_0.9 |
libsoup3-debugsource Red Hat:enterprise_linux:10.0 | All versions | 0:3.6.5-3.el10_0.9 |
libsoup3-devel Red Hat:enterprise_linux:10.0 | All versions | 0:3.6.5-3.el10_0.9 |
libsoup3-doc Red Hat:enterprise_linux:10.0 | All versions | 0:3.6.5-3.el10_0.9 |
libsoup3 Rocky Linux:10 | All versions | 0:3.6.5-3.el10_0.9 |
libsoup SUSE:Linux Enterprise Micro 5.2 | All versions | 2.68.4-150200.4.12.1 |
libsoup2 SUSE:Linux Enterprise Micro 5.3 | All versions | 2.74.2-150400.3.12.1 |
libsoup2 SUSE:Linux Enterprise Micro 5.4 | All versions | 2.74.2-150400.3.12.1 |
libsoup2 SUSE:Linux Enterprise Micro 5.5 | All versions | 2.74.2-150400.3.12.1 |
libsoup SUSE:Linux Enterprise Module for Basesystem 15 SP6 | All versions | 3.4.4-150600.3.13.1 |
libsoup2 SUSE:Linux Enterprise Module for Basesystem 15 SP6 | All versions | 2.74.3-150600.4.12.1 |
libsoup SUSE:Linux Enterprise Module for Basesystem 15 SP7 | All versions | 3.4.4-150600.3.13.1 |
libsoup2 SUSE:Linux Enterprise Module for Basesystem 15 SP7 | All versions | 2.74.3-150600.4.12.1 |
libsoup SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | All versions | 2.62.2-5.18.1 |
libsoup openSUSE:Leap 15.6 | All versions | 3.4.4-150600.3.13.1 |
libsoup2 openSUSE:Leap 15.6 | All versions | 2.74.3-150600.4.12.1 |
libsoup openSUSE:Tumbleweed | All versions | 3.6.5-6.1 |
libsoup2 openSUSE:Tumbleweed | All versions | 2.74.3-12.1 |
How do I fix CVE-2025-4945?
Apply the vendor's patch.
Is CVE-2025-4945 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-4945 exists.
Sources
Also known as AZL-110483, DEBIAN-CVE-2025-4945, GHSA-mwcf-jv2p-mmpx, RHSA-2025:19720, RLSA-2025:19720, SUSE-SU-2025:02212-1 and 8 more.