CVE-2006-5876: Libsoup

High severity, CVSS 7.8. EPSS: 2.7% chance of exploitation in the next 30 days.

The soup_headers_parse function in soup-headers.c for libsoup HTTP library before 2.2.99 allows remote attackers to cause a denial of service (crash) via malformed HTTP headers, probably involving missing fields or values.

Affected products

  • Libsoup Libsoup: version 2.2.98 only

Published 2007-01-16. Last modified 2026-06-16.