CVEvulnerability
CVE-2019-11070
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-04-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-19
Description
WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video (HLS, DASH, or Smooth Streaming), an error resulting in deanonymization. This issue was corrected by changing the way livestreams are downloaded.
Affected configurations
• webkitgtk webkitgtk (< 2.24.1)
• wpewebkit wpe webkit (< 2.24.1)
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html lists.opensuse.org
- http://packetstormsecurity.com/files/152485/WebKitGTK-WPE-WebKit-URI-Spoofing-Code-Execution.html Third Party Advisory
- http://www.openwall.com/lists/oss-security/2019/04/11/1 Third Party Advisory
- https://bugs.webkit.org/show_bug.cgi?id=193718 Issue Tracking, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YO5ZBUWOOXMVZPBYLZRDZF6ZQGBYJERQ/ lists.fedoraproject.org
- https://seclists.org/bugtraq/2019/Apr/21 Mailing List, Third Party Advisory, VDB Entry
- https://security.gentoo.org/glsa/201909-05 security.gentoo.org
- https://trac.webkit.org/changeset/243197/webkit Patch, Vendor Advisory
- https://usn.ubuntu.com/3948-1/ usn.ubuntu.com
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html lists.opensuse.org
- http://packetstormsecurity.com/files/152485/WebKitGTK-WPE-WebKit-URI-Spoofing-Code-Execution.html Third Party Advisory
- http://www.openwall.com/lists/oss-security/2019/04/11/1 Third Party Advisory
- https://bugs.webkit.org/show_bug.cgi?id=193718 Issue Tracking, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YO5ZBUWOOXMVZPBYLZRDZF6ZQGBYJERQ/ lists.fedoraproject.org
- https://seclists.org/bugtraq/2019/Apr/21 Mailing List, Third Party Advisory, VDB Entry
- https://security.gentoo.org/glsa/201909-05 security.gentoo.org
- https://trac.webkit.org/changeset/243197/webkit Patch, Vendor Advisory
- https://usn.ubuntu.com/3948-1/ usn.ubuntu.com