CVE-2025-32906

What it actually does

Out-of-bounds read in soup_headers_parse_request() triggered by a specially crafted HTTP request, resulting in denial of service via server crash.

Why it matters to the business

Remote attackers can cause denial-of-service crashes against services using the affected Red Hat Enterprise Linux 9 mpg123 packages, leading to application downtime and operational disruption; low EPSS and no KEV status indicate limited observed exploitation despite the flaw being public for over 500 days.

How an attack unfolds

An attacker sends a maliciously crafted HTTP request to an application using the vulnerable library; the soup_headers_parse_request function performs an out-of-bounds read while parsing headers, causing the HTTP server process to crash.

How to fix it

Upgrade all affected mpg123 packages on Red Hat Enterprise Linux 9 to the fixed versions 0:1.32.9-1.el9_5 in both appstream and crb repositories; apply updates via dnf or yum and restart dependent services.

How to confirm the fix worked

Verify installed package versions match or exceed 0:1.32.9-1.el9_5 using rpm -q; confirm absence of the vulnerable soup_headers_parse_request behavior through code review or updated library testing; monitor for service stability under crafted request tests.

Typical attack path

1. Identify a target HTTP server or application using the vulnerable libsoup implementation on affected Red Hat packages
2. Craft and transmit a specially formed HTTP request designed to trigger the parsing flaw
3. Trigger the out-of-bounds read condition during header processing
4. Cause the target server process to terminate

How to detect it

Review HTTP server logs for sudden process terminations coinciding with unusual or malformed requests; inspect crash dumps or core files for evidence of header parsing failures; correlate with application availability metrics showing abrupt outages.

What your security team should do

• Prioritize patching all listed mpg123 packages to 0:1.32.9-1.el9_5 across Red Hat Enterprise Linux 9 environments
• Scan inventories for any remaining vulnerable versions and schedule immediate remediation
• Implement network-level request validation or rate limiting as a temporary control if patching is delayed