CVE-2018-11713

webkitgtk: WebSockets don't use system proxy settings

Published Jun 4, 2018 CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed
Description
WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy settings for WebSocket connections. As a result, users could be deanonymized by crafted web sites via a WebSocket connection.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2018-3732 WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy settings for WebSocket connections. As a result, users could be deanonymized by crafted web sites via a WebSocket connection.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 5, 2024, 8:17 AM
Reserved
Jun 4, 2018, 12:00 AM
Status
Modified
Published
Jun 4, 2018, 2:29 PM
Modified
Jun 17, 2026, 1:36 AM
Severity
Moderate
Public date
Jun 7, 2018, 12:00 AM