CVE-2018-11712 PUBLISHED

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections.

EPSS 0.22% · 44.0th percentile

Risk Scores

EPSS Score
0.22%
44.0th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSqtwebkit-opensource-src0, 5.212.0~alpha4-1ubuntu2.1, 5.212.0~alpha4-1ubuntu2
Ubuntu:22.04:LTSqtwebkit-opensource-src5.212.0~alpha4-15ubuntu1, 5.212.0~alpha4-14ubuntu2, 5.212.0~alpha4-14build1
Ubuntu:16.04:LTSqtwebkit-source2.3.2-0ubuntu11, 2.3.2-0ubuntu10, 0
Ubuntu:18.04:LTSqtwebkit-source2.3.2-0ubuntu13, 0
Ubuntu:16.04:LTSwebkit2gtk2.18.5-0ubuntu0.16.04.1, 2.18.6-0ubuntu0.16.04.1, 2.20.1-0ubuntu0.16.04.1
Ubuntu:24.04:LTSqtwebkit-opensource-src5.212.0~alpha4-33build1, 5.212.0~alpha4-33, 0
Ubuntu:16.04:LTSwebkitgtk2.4.11-0ubuntu0.1, 2.4.10-0ubuntu1, 2.4.9-2ubuntu2
Ubuntu:18.04:LTSwebkitgtk0, 2.4.11-3, 2.4.11-3ubuntu2
Ubuntu:16.04:LTSqtwebkit-opensource-src5.4.2+dfsg-1ubuntu2.1, 5.5.1+dfsg-2ubuntu1, 0
Ubuntu:18.04:LTSwebkit2gtk2.18.4-1, 2.20.1-1, 2.20.0-2
Ubuntu:18.04:LTSqtwebkit-opensource-src5.212.0~alpha2-7ubuntu1, 5.212.0~alpha2-7build2, 5.212.0~alpha2-7

Timeline

References

Open in Interactive Console →