CVE-2006-5876

Published: 16 January 2007

The soup_headers_parse function in soup-headers.c for libsoup HTTP library before 2.2.99 allows remote attackers to cause a denial of service (crash) via malformed HTTP headers, probably involving missing fields or values.

Priority

Status

Package	Release	Status
libsoup Launchpad, Ubuntu, Debian	upstream	Released (2.2.100)
	dapper	Released (2.2.93-0ubuntu1.1)
	edgy	Released (2.2.96-0ubuntu2.1)
	feisty	Not vulnerable

References

https://ubuntu.com/security/notices/USN-411-1
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5876
NVD
Launchpad
Debian

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›