{
	"document":{
		"aggregate_severity":{
			"namespace":"https://nvd.nist.gov/vuln-metrics/cvss",
			"text":"MEDIUM"
		},
		"category":"csaf_vex",
		"csaf_version":"2.0",
		"distribution":{
			"tlp":{
				"label":"WHITE",
				"url":"https:/www.first.org/tlp/"
			}
		},
		"lang":"en",
		"notes":[
			{
				"text":"A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension. The extension's decompression loop (inflate()) processes data in chunks without enforcing an upper boundary limit on the output buffer size. While libsoup limits the incoming compressed frame size via max_incoming_payload_size, it fails to track or limit memory allocation during decompression. A separate check for decompressed size (max_total_message_size) exists but executes only after inflation is complete, and it is entirely disabled by default for client connections. A remote, unauthenticated attacker can exploit this by sending a small, highly compressed payload (a decompression bomb), causing unbounded memory allocation that triggers an Out-of-Memory (OOM) crash and a Denial of Service (DoS).",
				"category":"general",
				"title":"Synopsis"
			}
		],
		"publisher":null,
		"references":[
			{
				"summary":"nvd cve",
				"category":"external",
				"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15709"
			},
			{
				"summary":"CVE-2026-15709 vex file",
				"category":"self",
				"url":"https://repo.openeuler.org/security/data/csaf/cve/2026/csaf-openeuler-cve-2026-15709.json"
			},
			{
				"summary":"openEuler-SA-2026-4044",
				"category":"self",
				"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4044"
			},
			{
				"summary":"CVE-2026-15709",
				"category":"self",
				"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-15709&packageName=libsoup"
			}
		],
		"title":"openEuler cve CVE-2026-15709",
		"tracking":{
			"initial_release_date":"2026-09-30T16:03:49+08:00",
			"revision_history":[
				{
					"date":"2026-09-30T16:03:49+08:00",
					"summary":"Initial",
					"number":"1.0.0"
				}
			],
			"generator":{
				"date":"2026-09-30T16:03:49+08:00",
				"engine":{
					"name":"openEuler CSAF Tool V1.0"
				}
			},
			"current_release_date":"2026-09-30T16:03:49+08:00",
			"id":"CVE-2026-15709",
			"version":"1.0.0",
			"status":"interim"
		}
	},
	"product_tree":{
		"branches":[
			{
				"name":"openEuler",
				"category":"vendor",
				"branches":[
					{
						"name":"openEuler",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"openEuler-24.03-LTS-SP1",
									"name":"openEuler-24.03-LTS-SP1"
								},
								"name":"openEuler-24.03-LTS-SP1",
								"category":"product_version"
							}
						],
						"category":"product_name"
					},
					{
						"name":"src",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"libsoup-2.74.3-27.oe2403sp1.src.rpm",
									"name":"libsoup-2.74.3-27.oe2403sp1.src.rpm"
								},
								"name":"libsoup-2.74.3-27.oe2403sp1.src.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"x86_64",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"libsoup-2.74.3-27.oe2403sp1.x86_64.rpm",
									"name":"libsoup-2.74.3-27.oe2403sp1.x86_64.rpm"
								},
								"name":"libsoup-2.74.3-27.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"libsoup-debuginfo-2.74.3-27.oe2403sp1.x86_64.rpm",
									"name":"libsoup-debuginfo-2.74.3-27.oe2403sp1.x86_64.rpm"
								},
								"name":"libsoup-debuginfo-2.74.3-27.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"libsoup-debugsource-2.74.3-27.oe2403sp1.x86_64.rpm",
									"name":"libsoup-debugsource-2.74.3-27.oe2403sp1.x86_64.rpm"
								},
								"name":"libsoup-debugsource-2.74.3-27.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"libsoup-devel-2.74.3-27.oe2403sp1.x86_64.rpm",
									"name":"libsoup-devel-2.74.3-27.oe2403sp1.x86_64.rpm"
								},
								"name":"libsoup-devel-2.74.3-27.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"noarch",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"libsoup-help-2.74.3-27.oe2403sp1.noarch.rpm",
									"name":"libsoup-help-2.74.3-27.oe2403sp1.noarch.rpm"
								},
								"name":"libsoup-help-2.74.3-27.oe2403sp1.noarch.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"aarch64",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"libsoup-2.74.3-27.oe2403sp1.aarch64.rpm",
									"name":"libsoup-2.74.3-27.oe2403sp1.aarch64.rpm"
								},
								"name":"libsoup-2.74.3-27.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"libsoup-debuginfo-2.74.3-27.oe2403sp1.aarch64.rpm",
									"name":"libsoup-debuginfo-2.74.3-27.oe2403sp1.aarch64.rpm"
								},
								"name":"libsoup-debuginfo-2.74.3-27.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"libsoup-debugsource-2.74.3-27.oe2403sp1.aarch64.rpm",
									"name":"libsoup-debugsource-2.74.3-27.oe2403sp1.aarch64.rpm"
								},
								"name":"libsoup-debugsource-2.74.3-27.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"libsoup-devel-2.74.3-27.oe2403sp1.aarch64.rpm",
									"name":"libsoup-devel-2.74.3-27.oe2403sp1.aarch64.rpm"
								},
								"name":"libsoup-devel-2.74.3-27.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					}
				]
			}
		],
		"relationships":[
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"libsoup-2.74.3-27.oe2403sp1.src.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:libsoup-2.74.3-27.oe2403sp1.src",
					"name":"libsoup-2.74.3-27.oe2403sp1.src as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"libsoup-2.74.3-27.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:libsoup-2.74.3-27.oe2403sp1.x86_64",
					"name":"libsoup-2.74.3-27.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"libsoup-debuginfo-2.74.3-27.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:libsoup-debuginfo-2.74.3-27.oe2403sp1.x86_64",
					"name":"libsoup-debuginfo-2.74.3-27.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"libsoup-debugsource-2.74.3-27.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:libsoup-debugsource-2.74.3-27.oe2403sp1.x86_64",
					"name":"libsoup-debugsource-2.74.3-27.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"libsoup-devel-2.74.3-27.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:libsoup-devel-2.74.3-27.oe2403sp1.x86_64",
					"name":"libsoup-devel-2.74.3-27.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"libsoup-help-2.74.3-27.oe2403sp1.noarch.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:libsoup-help-2.74.3-27.oe2403sp1.noarch",
					"name":"libsoup-help-2.74.3-27.oe2403sp1.noarch as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"libsoup-2.74.3-27.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:libsoup-2.74.3-27.oe2403sp1.aarch64",
					"name":"libsoup-2.74.3-27.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"libsoup-debuginfo-2.74.3-27.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:libsoup-debuginfo-2.74.3-27.oe2403sp1.aarch64",
					"name":"libsoup-debuginfo-2.74.3-27.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"libsoup-debugsource-2.74.3-27.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:libsoup-debugsource-2.74.3-27.oe2403sp1.aarch64",
					"name":"libsoup-debugsource-2.74.3-27.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"libsoup-devel-2.74.3-27.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:libsoup-devel-2.74.3-27.oe2403sp1.aarch64",
					"name":"libsoup-devel-2.74.3-27.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			}
		]
	},
	"vulnerabilities":[
		{
			"cve":"CVE-2026-15709",
			"notes":[
				{
					"text":"A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension. The extension's decompression loop (inflate()) processes data in chunks without enforcing an upper boundary limit on the output buffer size. While libsoup limits the incoming compressed frame size via max_incoming_payload_size, it fails to track or limit memory allocation during decompression. A separate check for decompressed size (max_total_message_size) exists but executes only after inflation is complete, and it is entirely disabled by default for client connections. A remote, unauthenticated attacker can exploit this by sending a small, highly compressed payload (a decompression bomb), causing unbounded memory allocation that triggers an Out-of-Memory (OOM) crash and a Denial of Service (DoS).",
					"category":"description",
					"title":"Vulnerability Description"
				}
			],
			"product_status":{
				"fixed":[
					"openEuler-24.03-LTS-SP1:libsoup-2.74.3-27.oe2403sp1.src",
					"openEuler-24.03-LTS-SP1:libsoup-2.74.3-27.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:libsoup-debuginfo-2.74.3-27.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:libsoup-debugsource-2.74.3-27.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:libsoup-devel-2.74.3-27.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:libsoup-help-2.74.3-27.oe2403sp1.noarch",
					"openEuler-24.03-LTS-SP1:libsoup-2.74.3-27.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:libsoup-debuginfo-2.74.3-27.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:libsoup-debugsource-2.74.3-27.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:libsoup-devel-2.74.3-27.oe2403sp1.aarch64"
				]
			},
			"remediations":[
				{
					"product_ids":[
						"openEuler-24.03-LTS-SP1:libsoup-2.74.3-27.oe2403sp1.src",
						"openEuler-24.03-LTS-SP1:libsoup-2.74.3-27.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:libsoup-debuginfo-2.74.3-27.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:libsoup-debugsource-2.74.3-27.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:libsoup-devel-2.74.3-27.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:libsoup-help-2.74.3-27.oe2403sp1.noarch",
						"openEuler-24.03-LTS-SP1:libsoup-2.74.3-27.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:libsoup-debuginfo-2.74.3-27.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:libsoup-debugsource-2.74.3-27.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:libsoup-devel-2.74.3-27.oe2403sp1.aarch64"
					],
					"details":"libsoup security update",
					"category":"vendor_fix",
					"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4044"
				}
			],
			"scores":[
				{
					"cvss_v3":{
						"baseSeverity":"HIGH",
						"baseScore":7.5,
						"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
						"version":"3.1"
					},
					"products":[
						"openEuler-24.03-LTS-SP1:libsoup-2.74.3-27.oe2403sp1.src",
						"openEuler-24.03-LTS-SP1:libsoup-2.74.3-27.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:libsoup-debuginfo-2.74.3-27.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:libsoup-debugsource-2.74.3-27.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:libsoup-devel-2.74.3-27.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:libsoup-help-2.74.3-27.oe2403sp1.noarch",
						"openEuler-24.03-LTS-SP1:libsoup-2.74.3-27.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:libsoup-debuginfo-2.74.3-27.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:libsoup-debugsource-2.74.3-27.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:libsoup-devel-2.74.3-27.oe2403sp1.aarch64"
					]
				}
			],
			"threats":[
				{
					"details":"High",
					"category":"impact"
				}
			],
			"title":"CVE-2026-15709"
		}
	]
}