CVE-2018-11713

Name: CVE-2018-11713
Creator: NVD / NIST
Published: 2018-06-04T14:29:00.453+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.59%

Last modified Jun 17, 2026

CVE-2018-11713 is a vulnerability of currently unknown severity. WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy settings for WebSocket connections. As a result, users could be deanonymized by crafted web sites via a WebSocket connection.. EPSS estimates a 1.59% chance of exploitation in the next 30 days.

Description

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy settings for WebSocket connections. As a result, users could be deanonymized by crafted web sites via a WebSocket connection.

Metrics

EPSS Probability

1.59%

72.5th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Webkitgtk	Webkitgtk\+	< 2.20.0
Gnome	Libsoup	< 2.62.0

References

https://bugs.webkit.org/show_bug.cgi?id=126384Issue Tracking, Patch, Third Party Advisory
https://security.gentoo.org/glsa/201808-04
https://trac.webkit.org/changeset/228088/webkitIssue Tracking, Patch, Third Party Advisory
https://bugs.webkit.org/show_bug.cgi?id=126384Issue Tracking, Patch, Third Party Advisory
https://security.gentoo.org/glsa/201808-04
https://trac.webkit.org/changeset/228088/webkitIssue Tracking, Patch, Third Party Advisory

Timeline

Published: Jun 4, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-11713?

How severe is CVE-2018-11713?

Severity scoring for CVE-2018-11713 is pending analysis. The EPSS model estimates a 1.59% probability of exploitation in the next 30 days.

How do I fix CVE-2018-11713?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-11713?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST