Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-11712

Опубликовано: 07 июн. 2018
Источник: redhat
CVSS3: 7.5
EPSS Низкий

Описание

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6webkitgtkWill not fix
Red Hat Enterprise Linux 7webkitgtk3Will not fix
Red Hat Enterprise Linux 8webkit2gtk3Not affected
Red Hat Enterprise Linux 7accountsserviceFixedRHSA-2018:314030.10.2018
Red Hat Enterprise Linux 7adwaita-icon-themeFixedRHSA-2018:314030.10.2018
Red Hat Enterprise Linux 7appstream-dataFixedRHSA-2018:314030.10.2018
Red Hat Enterprise Linux 7atkFixedRHSA-2018:314030.10.2018
Red Hat Enterprise Linux 7at-spi2-atkFixedRHSA-2018:314030.10.2018
Red Hat Enterprise Linux 7at-spi2-coreFixedRHSA-2018:314030.10.2018
Red Hat Enterprise Linux 7baobabFixedRHSA-2018:314030.10.2018

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-295
https://bugzilla.redhat.com/show_bug.cgi?id=1588742webkitgtk: Improper TLS certificate verification for WebSocket connections

EPSS

Процентиль: 46%
0.00228
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 7 лет назад

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections.

CVSS3: 7.5
nvd
около 7 лет назад

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections.

CVSS3: 7.5
debian
около 7 лет назад

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the li ...

CVSS3: 7.5
github
больше 3 лет назад

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections.

suse-cvrf
почти 7 лет назад

Security update for webkit2gtk3

EPSS

Процентиль: 46%
0.00228
Низкий

7.5 High

CVSS3