CVE-2018-11712

HIGH 7.5CVE-2018-11712 · Published 04/06/2018 · updated 17/06/2026

In short

CVE-2018-11712 is a HIGH (CVSS 7.5) vulnerability affecting webkitgtk+ (webkitgtk).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
webkitgtk+ webkitgtk	`= 2.20.0= 2.20.1`	No fix yet

Description

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections.

References

bugs.webkit.org/show_bug.cgi · Issue Tracking
security.gentoo.org/glsa/201808-04
trac.webkit.org/changeset/230886/webkit · Issue Tracking

More vulnerabilities in webkitgtk+

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

webkitgtk+

webkitgtk

= 2.20.0= 2.20.1

No fix yet

More vulnerabilities in webkitgtk+

See all →