VDB

CVE-2018-11712

CVE-2018-11712 PUBLISHED CVSS 7.5 HIGH

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections.

EPSS 1.18% · 66.4th percentile

Risk Scores

CVSS 3.0
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
1.18%
66.4th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSqtwebkit-opensource-src5.212.0~alpha3-3, 5.212.0~alpha3-6, 5.212.0~alpha3-7
Ubuntu:22.04:LTSqtwebkit-opensource-src5.212.0~alpha4-13, 0, *
Ubuntu:16.04:LTSqtwebkit-source0, 2.3.2-0ubuntu11, 2.3.2-0ubuntu10
Ubuntu:18.04:LTSqtwebkit-source2.3.2-0ubuntu13, 0
Ubuntu:16.04:LTSwebkit2gtk2.18.3-0ubuntu0.16.04.1, 0, 2.8.5+dfsg1-3
Ubuntu:24.04:LTSqtwebkit-opensource-src5.212.0~alpha4-36, 0, 5.212.0~alpha4-34ubuntu3
Ubuntu:16.04:LTSwebkitgtk2.4.11-0ubuntu0.1, 0, 2.4.10-0ubuntu1
Ubuntu:18.04:LTSwebkitgtk0, 2.4.11-3, 2.4.11-3ubuntu3
Ubuntu:16.04:LTSqtwebkit-opensource-src0, 5.5.1+dfsg-2ubuntu1, 5.4.2+dfsg-1ubuntu2.1
Ubuntu:18.04:LTSwebkit2gtk0, 2.20.0-2, 2.20.0-2ubuntu1
Ubuntu:18.04:LTSqtwebkit-opensource-src5.9.1+dfsg-5ubuntu1, 5.212.0~alpha2-7ubuntu1, 5.212.0~alpha2-7build2

Timeline

  • Jun 4, 2018 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 25, 2021 EPSS Score
  • Oct 27, 2021 EPSS Score
  • Dec 29, 2021 EPSS Score
  • Mar 3, 2022 EPSS Score
  • May 5, 2022 EPSS Score
  • Jul 7, 2022 EPSS Score
  • Nov 11, 2022 EPSS Score
  • Jan 13, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›