CVE-2024-52530: gnome libsoup HTTP Request/Response Smuggling

CVSS: 7.5v3.1HighModified

AliasesRHSA-2024:9501RHSA-2024:9524RHSA-2024:9525+7 more

Published 11-11-2024Last modified 03-11-2025

Vulnerability summary

CVE-2024-52530 is a high (CVSS 7.5) HTTP Request/Response Smuggling vulnerability in gnome libsoup. EPSS estimates a 0.78% chance of exploitation in the next 30 days, higher than 55% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

40/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.1 (CVE.org)

EPSS score

0.78%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 15 · Related 11

DLA-3992-1 MGASA-2024-0382 OPENSUSE-SU-2024:14489-1 RHSA-2024:9559 RHSA-2024:9573 SUSE-SU-2024:4290-1+9 more

Timeline

11-11-2024
PublishedVulnerability first disclosed.
03-11-2025
Last modifiedVulnerability information updated.

Description

GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header.

CVSS metrics

5 scores · 5 sources · 1 version

v3.17.5

EPSS trend

Probability

0.78%

Chance of exploitation in the next 30 days

Percentile

55%

Versus all other CVEs

30-day change

0.00 pp

From 0.78% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.78%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (gitlab.gnome.org)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.

Affected systems

Redhat4 products

libsoup< 0:2.62.3-1.el8_2.1 | < 0:2.62.3-3.el8_8.1 | < 0:2.62.3-2.el8_6.1 | < 0:2.62.3-2.el8_4.1 | < 0:2.72.0-8.el9_2.1 | < 0:2.72.0-8.el9_4.1 | < 0:2.72.0-8.el9_0.1 | < 0:2.62.2-3.el7_9
libsoup-debuginfo< 0:2.62.3-1.el8_2.1 | < 0:2.62.3-3.el8_8.1 | < 0:2.62.3-2.el8_6.1 | < 0:2.62.3-2.el8_4.1 | < 0:2.72.0-8.el9_2.1 | < 0:2.72.0-8.el9_4.1 | < 0:2.72.0-8.el9_0.1 | < 0:2.62.2-3.el7_9
libsoup-debugsource< 0:2.62.3-1.el8_2.1 | < 0:2.62.3-3.el8_8.1 | < 0:2.62.3-2.el8_6.1 | < 0:2.62.3-2.el8_4.1 | < 0:2.72.0-8.el9_2.1 | < 0:2.72.0-8.el9_4.1 | < 0:2.72.0-8.el9_0.1
libsoup-devel< 0:2.62.3-1.el8_2.1 | < 0:2.62.3-3.el8_8.1 | < 0:2.62.3-2.el8_6.1 | < 0:2.62.3-2.el8_4.1 | < 0:2.72.0-8.el9_2.1 | < 0:2.72.0-8.el9_4.1 | < 0:2.72.0-8.el9_0.1 | < 0:2.62.2-3.el7_9

Debian2 products

libsoup2.4< 2.74.3-1+deb12u1 | < 2.74.3-8.1
libsoup3< 3.2.3-0+deb12u1 | < 3.5.2-1

Ubuntu2 products

libsoup2.4< 2.62.1-1ubuntu0.4+esm1 | < 2.70.0-1ubuntu0.1 | < 2.74.2-3ubuntu0.1 | < 2.74.3-6ubuntu1.1
libsoup3< 3.0.7-0ubuntu1+esm1 | < 3.4.4-5ubuntu0.1

Gnome1 product