[{"CVE":"CVE-2019-17266","severity":"important","public_date":"2019-10-06T00:00:00Z","advisories":[],"bugzilla":"1771292","bugzilla_description":"CVE-2019-17266 libsoup: heap-based over-read in soup_ntlm_parse_challenge() in soup-auth-ntlm.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-17266.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"8.2"},{"CVE":"CVE-2018-12910","severity":"moderate","public_date":"2018-07-03T00:00:00Z","advisories":["RHSA-2018:3140"],"bugzilla":"1597980","bugzilla_description":"CVE-2018-12910 libsoup: Crash in soup_cookie_jar.c:get_cookies() on empty hostnames","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":["libsoup-0:2.62.2-2.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12910.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2017-2885","severity":"important","public_date":"2017-08-10T00:00:00Z","advisories":["RHSA-2017:2459"],"bugzilla":"1479281","bugzilla_description":"CVE-2017-2885 libsoup: Stack based buffer overflow with HTTP Chunked Encoding","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":["libsoup-0:2.56.0-4.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2885.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2012-2132","severity":"low","public_date":"2012-04-23T00:00:00Z","advisories":[],"bugzilla":"817692","bugzilla_description":"CVE-2012-2132 libsoup: does not indicate whether or not an SSL certificate is valid","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2132.json"},{"CVE":"CVE-2011-2524","severity":"moderate","public_date":"2011-07-28T00:00:00Z","advisories":["RHSA-2011:1102"],"bugzilla":"720509","bugzilla_description":"CVE-2011-2524 libsoup: SoupServer directory traversal flaw","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libsoup-0:2.28.2-1.el6_1.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2524.json"},{"CVE":"CVE-2009-0585","severity":"moderate","public_date":"2009-03-12T00:00:00Z","advisories":["RHSA-2009:0344"],"bugzilla":"488026","bugzilla_description":"CVE-2009-0585 libsoup: integer overflow in soup_base64_encode()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":["libsoup-0:2.2.98-2.el5_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0585.json"}]