CVE-2018-12910

libsoup: Crash in soup_cookie_jar.c:get_cookies() on empty hostnames

Published Jul 5, 2018 CVSS 3.0 · 9.8 Critical EPSS 4.1% KEV · Not listed
Description
The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-1416-1 libsoup2.4 security update
Debian DSA Debian DSA DSA-4241-1 libsoup2.4 security update
EUVD EUVD EUVD-2018-4863 The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.
Ubuntu USN Ubuntu USN USN-3701-1 libsoup vulnerability
History

No history.