PT-2018-10771 · Gnome+5 · Libsoup+5

Dirkjan Ochtman · Publicado 2018-03-18 · Atualizado 2019-10-03 · CVE-2018-11713

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions WebKitGTK+ versions prior to 2.20.0 libsoup versions prior to 2.62.0

Description The issue concerns the libsoup network backend of WebKit, where the SocketStreamHandleImplSoup.cpp file failed to use system proxy settings for WebSocket connections. This could allow crafted web sites to deanonymize users via a WebSocket connection.

Recommendations For WebKitGTK+ versions prior to 2.20.0, update to version 2.20.0 or later to resolve the issue. For libsoup versions prior to 2.62.0, update to version 2.62.0 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

ALT-PU-2018-1446

ALT-PU-2018-1447

CESA-2018_3140

CVE-2018-11713

OPENSUSE-SU-2018_3473-1

OPENSUSE-SU-2019:0081-1

OPENSUSE-SU-2019_0081-1

RHSA-2018:3140

RHSA-2018_3140

SUSE-SU-2018:3387-1

SUSE-SU-2019:0092-1

Produtos afetados

Alt Linux

Centos

Red Hat

Suse

Webkitgtk

Libsoup

Referências · 859

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/apple_ios/browser/safari_jit.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/browser/safari_proxy_object_type_confusion.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/apple_ios/browser/webkit_createthis.rb · Exploit
• 🔥 https://github.com/Metnew/uxss-db/tree/master/webkit/CVE-2018-4204 · Exploit
• 🔥 https://github.com/Cryptogenic/PS4-6.20-WebKit-Code-Execution-Exploit · Exploit
• 🔥 https://github.com/saelo/cve-2018-4233 · Exploit
• 🔥 https://github.com/mwrlabs/CVE-2018-4121 · Exploit
• 🔥 https://github.com/FSecureLABS/CVE-2018-4121 · Exploit
• 🔥 https://github.com/erupmi/CVE-2018-4416-exploit · Exploit
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/webkitplus.rb · Nota
• https://lists.centos.org/pipermail/centos-cr-announce/2018-November/018203.html · Nota
• https://suse.com/security/cve/CVE-2018-4222 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10767 · Nota de Segurança
• https://suse.com/security/cve/CVE-2018-4190 · Nota
• https://suse.com/security/cve/CVE-2018-4437.html · Nota