NetSight
IP …
critical9.8

CVE-2018-12910

The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.

Impact

The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.

Affected products

VendorProductAffected versions
GnomeLibsoup
Version 2.63.2
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.10, 18.04
DebianDebian Linux
Versions 8.0, 9.0
RedhatAnsible Tower
Version 3.3
RedhatOpenshift Container Platform
Version 3.11
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0
OpensuseLeap
Version 15.0

Weakness classification

CWE-125

References