CVE-2018-12910

Publication date 29 June 2018

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Cvss 3 Severity Score

9.8 · Critical

Score breakdown

The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.

Status

Package Ubuntu Release Status
libsoup2.4 18.04 LTS bionic
Fixed 2.62.1-1ubuntu0.1
17.10 artful
Fixed 2.60.1-1ubuntu0.1
16.04 LTS xenial
Fixed 2.52.2-1ubuntu0.3
14.04 LTS trusty
Fixed 2.44.2-1ubuntu2.3

Severity score breakdown

Parameter Value
Base score 9.8 · Critical
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Scope Unchanged
Confidentiality High
Integrity impact High
Availability impact High
Vector CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H