Vulnerability in Gnome Libsoup

CVE-2018-11713

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy settings for WebSocket…

EPSS: 0.016 (72.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N.

Affected products

References

  • cve@mitre.org (Patch, Third Party Advisory, x_refsource_MISC, Issue Tracking)
  • cve@mitre.org (vendor-advisory, x_refsource_GENTOO)
  • cve@mitre.org (Patch, Third Party Advisory, x_refsource_MISC, Issue Tracking)

Frequently asked questions

What is CVE-2018-11713?
CVE-2018-11713 is a medium-severity vulnerability in Gnome Libsoup. CVSS score: 6.5/10. Published 2018-06-04.
How severe is CVE-2018-11713?
Medium severity. CVSS v3 base score is 6.5 out of 10.