Vulnetix
Try Vulnetix Request Demo
CVE-2018-11713 PUBLISHED

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy settings for WebSocket connections. As a result, users could be deanonymized by crafted web sites via a WebSocket connection.

EPSS 0.55% · 67.8th percentile

Risk Scores

EPSS Score
0.55%
67.8th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSqtwebkit-opensource-src0, 5.212.0~alpha2-5build2, 5.9.1+dfsg-5ubuntu3
Ubuntu:16.04:LTSqtwebkit-opensource-src5.5.1+dfsg-2ubuntu1, 5.4.2+dfsg-1ubuntu2.1, 0
Ubuntu:16.04:LTSwebkit2gtk2.14.2-0ubuntu0.16.04.1, 2.14.3-0ubuntu0.16.04.1, 2.14.5-0ubuntu0.16.04.1
Ubuntu:24.04:LTSqtwebkit-opensource-src0, 5.212.0~alpha4-36, 5.212.0~alpha4-34ubuntu4
Ubuntu:20.04:LTSqtwebkit-opensource-src5.212.0~alpha4-1, 0, 5.212.0~alpha3-3
Ubuntu:16.04:LTSwebkitgtk0, 2.4.9-2ubuntu2, 2.4.10-0ubuntu1
Ubuntu:22.04:LTSqtwebkit-opensource-src5.212.0~alpha4-13, 5.212.0~alpha4-14, 5.212.0~alpha4-14ubuntu2
Ubuntu:16.04:LTSqtwebkit-source0, 2.3.2-0ubuntu11, 2.3.2-0ubuntu10
Ubuntu:18.04:LTSqtwebkit-source2.3.2-0ubuntu13, 0
Ubuntu:18.04:LTSwebkitgtk2.4.11-3, 2.4.11-3ubuntu2, 2.4.11-3ubuntu3

Timeline

References

Open in Interactive Console →