CVE-2018-11712: High severity webkitgtk+ vulnerability
Published Jun 4, 2018
·Updated
WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections.
Affected Software
2 affected components
WebKitGTK Webkitgtk\+=2.20.0
WebKitGTK Webkitgtk\+=2.20.1
Remediation
Patch Available
Patch Available
Event History
Jun 4, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2018-11712.
2
What is the title of this vulnerability?
The title of this vulnerability is WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKi…
3
What is the severity of CVE-2018-11712?
The severity of CVE-2018-11712 is high with a CVSS score of 7.5.
4
What software versions are affected by CVE-2018-11712?
WebKiGTK+ versions 2.20.0 and 2.20.1 are affected by CVE-2018-11712.
5
How do I fix CVE-2018-11712?
To fix CVE-2018-11712, it is recommended to update to a version of WebKiGTK+ that is not affected by the vulnerability.