CVE-2024-52531: 
NixOS vulnerability analysis and mitigation

GNOME libsoup before version 3.6.1 contains a buffer overflow vulnerability (CVE-2024-52531) that affects applications performing UTF-8 conversion in the soup_header_parse_param_list_strict function. Notably, this vulnerability cannot be triggered by input received over the network (NVD).

The vulnerability is classified as a classic buffer overflow (CWE-120) that occurs during UTF-8 conversion operations in the soup_header_parse_param_list_strict function. The CVSS v3.1 base score is 8.4 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating local access is required but no privileges or user interaction are needed (CISA-ADP).

The vulnerability has a high severity rating with potential for complete compromise of system confidentiality, integrity, and availability when successfully exploited. However, the impact is somewhat limited by the fact that the vulnerability cannot be triggered through network-received input (NVD).

The vulnerability requires local access to exploit, with no privileges or user interaction needed. The attack complexity is rated as low, making it relatively straightforward to exploit once local access is obtained (CISA-ADP).

The primary mitigation is to update libsoup to version 3.6.1 or later. Red Hat has released security updates for affected products, including Red Hat Enterprise Linux and Red Hat Integration Camel K (Red Hat Advisory).