Riskcovery

CVE-2026-3634

Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header

State
Published
Severity
3.9 Low
Published
Mar 17, 2026
Updated
Mar 19, 2026
Reserved
Mar 6, 2026

Read the record on cve.org

Description

A flaw was found in libsoup. An attacker controlling the value used to set the Content-Type header can inject a Carriage Return Line Feed (CRLF) sequence due to improper input sanitization in the `soup_message_headers_set_content_type()` function. This vulnerability allows for the injection of arbitrary header-value pairs, potentially leading to HTTP header injection and response splitting attacks.

Scores

CVSSScoreVectorSource
3.13.9 LowCVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:Lredhat

Weaknesses

  • CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection')

Affected Products

ProductVersions
Red Hat Enterprise Linux 10Red Hat
    Red Hat Enterprise Linux 6Red Hat
      Red Hat Enterprise Linux 7Red Hat
        Red Hat Enterprise Linux 8Red Hat
          Red Hat Enterprise Linux 9Red Hat

            References

            Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.