CVE-2018-12910

The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have...

9.8 CriticalFix available

The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

4.19%Up 1.7 points since Apr 14, 2021

What each source reports

NVD Score used 9.8

The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.

Record: CVE-2018-12910
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-125
Updated: 2026-11-02

CVE List No score

The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.

Record: CVE-2018-12910
Updated: 2026-11-02

EUVDEUVD-2018-4863 No score

The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.

Record: EUVD-2018-4863
Updated: 2026-11-03

GitHub AdvisoriesGHSA-wv8f-jq6c-45j5 9.8

The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have...

The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.

Record: GHSA-wv8f-jq6c-45j5
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-125
Updated: 2026-11-02

OSV 9.8

The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.

Record: CVE-2018-12910
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2018-12910 9.8

The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.

Record: DEBIAN-CVE-2018-12910
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 8 moreShow less

OSVRHSA-2018:3140 7.5

Red Hat Security Advisory: GNOME security, bug fix, and enhancement update

Record: RHSA-2018:3140
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVUBUNTU-CVE-2018-12910 9.8

The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.

Record: UBUNTU-CVE-2018-12910
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVMGASA-2018-0328 No score

Updated libsoup packages fix security vulnerability

It was discovered that libsoup versions 2.63.2 and prior incorrectly handled certain cookie requests. An attacker could possibly use this to cause a denial of service (CVE-2018-12910).

Record: MGASA-2018-0328
Updated: 2026-11-02

OSVopenSUSE-SU-2019:1310-1 No score

Security update for libsoup

This update for libsoup fixes the following issues:

Security issue fixed:

CVE-2018-12910: Fix crash when handling empty hostnames (bsc#1100097).

This update was imported from the SUSE:SLE-15:Update update project.

Record: openSUSE-SU-2019:1310-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10994-1 No score

libsoup-2_4-1-2.72.0-2.5 on GA media

These are all security issues fixed in the libsoup-2_4-1-2.72.0-2.5 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10994-1
Updated: 2026-11-02

OSVSUSE-SU-2018:2204-1 No score

Security update for libsoup

This update for libsoup fixes the following issues:

Security issue fixed:

CVE-2018-12910: Fix crash when handling empty hostnames (bsc#1100097).
CVE-2017-2885: Fix chunk decoding buffer overrun that could be exploited against either clients or servers (bsc#1052916).

Bug fixes:

bsc#1086036: translation-update-upstream commented out for Leap

Record: SUSE-SU-2018:2204-1
Updated: 2026-11-02

OSVSUSE-SU-2018:2204-2 No score

Security update for libsoup

This update for libsoup fixes the following issues:

Security issue fixed:

CVE-2018-12910: Fix crash when handling empty hostnames (bsc#1100097).
CVE-2017-2885: Fix chunk decoding buffer overrun that could be exploited against either clients or servers (bsc#1052916).

Bug fixes:

bsc#1086036: translation-update-upstream commented out for Leap

Record: SUSE-SU-2018:2204-2
Updated: 2026-11-02

OSVUSN-3701-1 No score

libsoup2.4 vulnerability

It was discovered that libsoup incorrectly handled certain cookie requests. An attacker could possibly use this to cause a denial of service.

Record: USN-3701-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`libsoup2.4` Debian:12	before 2.62.2-2	2.62.2-2
`libsoup2.4` Debian:13	before 2.62.2-2	2.62.2-2
`libsoup2.4` Debian:8	before 2.48.0-1+deb8u2, plus listed versions 2.48.0-12.48.0-1+deb8u1	2.48.0-1+deb8u2
`libsoup2.4` Debian:9	before 2.56.0-2+deb9u2, plus listed versions 2.56.0-22.56.0-2+deb9u1	2.56.0-2+deb9u2
`libsoup` Mageia:6	before 2.58.2-1.1.mga6	2.58.2-1.1.mga6
`PackageKit` Red Hat:enterprise_linux:7::client	before 0:1.1.10-1.el7	0:1.1.10-1.el7
`PackageKit-command-not-found` Red Hat:enterprise_linux:7::client	before 0:1.1.10-1.el7	0:1.1.10-1.el7
`PackageKit-debuginfo` Red Hat:enterprise_linux:7::client	before 0:1.1.10-1.el7	0:1.1.10-1.el7
`PackageKit-glib` Red Hat:enterprise_linux:7::client	before 0:1.1.10-1.el7	0:1.1.10-1.el7
`PackageKit-gstreamer-plugin` Red Hat:enterprise_linux:7::client	before 0:1.1.10-1.el7	0:1.1.10-1.el7

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`PackageKit-gtk3-module` Red Hat:enterprise_linux:7::client	before 0:1.1.10-1.el7	0:1.1.10-1.el7
`PackageKit-yum` Red Hat:enterprise_linux:7::client	before 0:1.1.10-1.el7	0:1.1.10-1.el7
`accountsservice` Red Hat:enterprise_linux:7::client	before 0:0.6.50-2.el7	0:0.6.50-2.el7
`accountsservice-debuginfo` Red Hat:enterprise_linux:7::client	before 0:0.6.50-2.el7	0:0.6.50-2.el7
`accountsservice-libs` Red Hat:enterprise_linux:7::client	before 0:0.6.50-2.el7	0:0.6.50-2.el7
`adwaita-cursor-theme` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`adwaita-gtk2-theme` Red Hat:enterprise_linux:7::client	before 0:3.28-2.el7	0:3.28-2.el7
`adwaita-icon-theme` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`appstream-data` Red Hat:enterprise_linux:7::client	before 0:7-20180614.el7	0:7-20180614.el7
`at-spi2-atk` Red Hat:enterprise_linux:7::client	before 0:2.26.2-1.el7	0:2.26.2-1.el7
`at-spi2-atk-debuginfo` Red Hat:enterprise_linux:7::client	before 0:2.26.2-1.el7	0:2.26.2-1.el7
`at-spi2-core` Red Hat:enterprise_linux:7::client	before 0:2.28.0-1.el7	0:2.28.0-1.el7
`at-spi2-core-debuginfo` Red Hat:enterprise_linux:7::client	before 0:2.28.0-1.el7	0:2.28.0-1.el7
`atk` Red Hat:enterprise_linux:7::client	before 0:2.28.1-1.el7	0:2.28.1-1.el7
`atk-debuginfo` Red Hat:enterprise_linux:7::client	before 0:2.28.1-1.el7	0:2.28.1-1.el7
`baobab` Red Hat:enterprise_linux:7::client	before 0:3.28.0-2.el7	0:3.28.0-2.el7
`baobab-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.0-2.el7	0:3.28.0-2.el7
`bolt` Red Hat:enterprise_linux:7::client	before 0:0.4-3.el7	0:0.4-3.el7
`bolt-debuginfo` Red Hat:enterprise_linux:7::client	before 0:0.4-3.el7	0:0.4-3.el7
`brasero` Red Hat:enterprise_linux:7::client	before 0:3.12.2-5.el7	0:3.12.2-5.el7
`brasero-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.12.2-5.el7	0:3.12.2-5.el7
`brasero-libs` Red Hat:enterprise_linux:7::client	before 0:3.12.2-5.el7	0:3.12.2-5.el7
`brasero-nautilus` Red Hat:enterprise_linux:7::client	before 0:3.12.2-5.el7	0:3.12.2-5.el7
`cairo` Red Hat:enterprise_linux:7::client	before 0:1.15.12-3.el7	0:1.15.12-3.el7
`cairo-debuginfo` Red Hat:enterprise_linux:7::client	before 0:1.15.12-3.el7	0:1.15.12-3.el7
`cairo-gobject` Red Hat:enterprise_linux:7::client	before 0:1.15.12-3.el7	0:1.15.12-3.el7
`cheese` Red Hat:enterprise_linux:7::client	before 2:3.28.0-1.el7	2:3.28.0-1.el7
`cheese-debuginfo` Red Hat:enterprise_linux:7::client	before 2:3.28.0-1.el7	2:3.28.0-1.el7
`cheese-libs` Red Hat:enterprise_linux:7::client	before 2:3.28.0-1.el7	2:3.28.0-1.el7
`clutter-gst3` Red Hat:enterprise_linux:7::client	before 0:3.0.26-1.el7	0:3.0.26-1.el7
`clutter-gst3-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.0.26-1.el7	0:3.0.26-1.el7
`compat-exiv2-023` Red Hat:enterprise_linux:7::client	before 0:0.23-2.el7	0:0.23-2.el7
`compat-exiv2-023-debuginfo` Red Hat:enterprise_linux:7::client	before 0:0.23-2.el7	0:0.23-2.el7
`compat-libical1` Red Hat:enterprise_linux:7::client	before 0:1.0.1-2.el7	0:1.0.1-2.el7
`control-center` Red Hat:enterprise_linux:7::client	before 1:3.28.1-4.el7	1:3.28.1-4.el7
`control-center-debuginfo` Red Hat:enterprise_linux:7::client	before 1:3.28.1-4.el7	1:3.28.1-4.el7
`control-center-filesystem` Red Hat:enterprise_linux:7::client	before 1:3.28.1-4.el7	1:3.28.1-4.el7
`dconf` Red Hat:enterprise_linux:7::client	before 0:0.28.0-4.el7	0:0.28.0-4.el7
`dconf-debuginfo` Red Hat:enterprise_linux:7::client	before 0:0.28.0-4.el7	0:0.28.0-4.el7
`dconf-editor` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`dconf-editor-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`ekiga` Red Hat:enterprise_linux:7::client	before 0:4.0.1-8.el7	0:4.0.1-8.el7
`ekiga-debuginfo` Red Hat:enterprise_linux:7::client	before 0:4.0.1-8.el7	0:4.0.1-8.el7
`empathy` Red Hat:enterprise_linux:7::client	before 0:3.12.13-1.el7	0:3.12.13-1.el7
`empathy-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.12.13-1.el7	0:3.12.13-1.el7
`eog` Red Hat:enterprise_linux:7::client	before 0:3.28.3-1.el7	0:3.28.3-1.el7
`eog-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.3-1.el7	0:3.28.3-1.el7
`evince` Red Hat:enterprise_linux:7::client	before 0:3.28.2-5.el7	0:3.28.2-5.el7
`evince-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.2-5.el7	0:3.28.2-5.el7
`evince-dvi` Red Hat:enterprise_linux:7::client	before 0:3.28.2-5.el7	0:3.28.2-5.el7
`evince-libs` Red Hat:enterprise_linux:7::client	before 0:3.28.2-5.el7	0:3.28.2-5.el7
`evince-nautilus` Red Hat:enterprise_linux:7::client	before 0:3.28.2-5.el7	0:3.28.2-5.el7
`evolution` Red Hat:enterprise_linux:7::client	before 0:3.28.5-2.el7	0:3.28.5-2.el7
`evolution-data-server` Red Hat:enterprise_linux:7::client	before 0:3.28.5-1.el7	0:3.28.5-1.el7
`evolution-data-server-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.5-1.el7	0:3.28.5-1.el7
`evolution-data-server-langpacks` Red Hat:enterprise_linux:7::client	before 0:3.28.5-1.el7	0:3.28.5-1.el7
`evolution-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.5-2.el7	0:3.28.5-2.el7
`evolution-ews` Red Hat:enterprise_linux:7::client	before 0:3.28.5-1.el7	0:3.28.5-1.el7
`evolution-ews-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.5-1.el7	0:3.28.5-1.el7
`evolution-ews-langpacks` Red Hat:enterprise_linux:7::client	before 0:3.28.5-1.el7	0:3.28.5-1.el7
`evolution-help` Red Hat:enterprise_linux:7::client	before 0:3.28.5-2.el7	0:3.28.5-2.el7
`evolution-langpacks` Red Hat:enterprise_linux:7::client	before 0:3.28.5-2.el7	0:3.28.5-2.el7
`evolution-mapi` Red Hat:enterprise_linux:7::client	before 0:3.28.3-2.el7	0:3.28.3-2.el7
`evolution-mapi-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.3-2.el7	0:3.28.3-2.el7
`evolution-mapi-langpacks` Red Hat:enterprise_linux:7::client	before 0:3.28.3-2.el7	0:3.28.3-2.el7
`file-roller` Red Hat:enterprise_linux:7::client	before 0:3.28.1-2.el7	0:3.28.1-2.el7
`file-roller-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.1-2.el7	0:3.28.1-2.el7
`file-roller-nautilus` Red Hat:enterprise_linux:7::client	before 0:3.28.1-2.el7	0:3.28.1-2.el7
`flatpak` Red Hat:enterprise_linux:7::client	before 0:1.0.2-2.el7	0:1.0.2-2.el7
`flatpak-debuginfo` Red Hat:enterprise_linux:7::client	before 0:1.0.2-2.el7	0:1.0.2-2.el7
`flatpak-libs` Red Hat:enterprise_linux:7::client	before 0:1.0.2-2.el7	0:1.0.2-2.el7
`folks` Red Hat:enterprise_linux:7::client	before 1:0.11.4-1.el7	1:0.11.4-1.el7
`folks-debuginfo` Red Hat:enterprise_linux:7::client	before 1:0.11.4-1.el7	1:0.11.4-1.el7
`fontconfig` Red Hat:enterprise_linux:7::client	before 0:2.13.0-4.3.el7	0:2.13.0-4.3.el7
`fontconfig-debuginfo` Red Hat:enterprise_linux:7::client	before 0:2.13.0-4.3.el7	0:2.13.0-4.3.el7
`freetype` Red Hat:enterprise_linux:7::client	before 0:2.8-12.el7	0:2.8-12.el7
`freetype-debuginfo` Red Hat:enterprise_linux:7::client	before 0:2.8-12.el7	0:2.8-12.el7
`fribidi` Red Hat:enterprise_linux:7::client	before 0:1.0.2-1.el7	0:1.0.2-1.el7
`fribidi-debuginfo` Red Hat:enterprise_linux:7::client	before 0:1.0.2-1.el7	0:1.0.2-1.el7
`fwupd` Red Hat:enterprise_linux:7::client	before 0:1.0.8-4.el7	0:1.0.8-4.el7
`fwupd-debuginfo` Red Hat:enterprise_linux:7::client	before 0:1.0.8-4.el7	0:1.0.8-4.el7
`fwupdate` Red Hat:enterprise_linux:7::client	before 0:12-5.el7	0:12-5.el7
`fwupdate-debuginfo` Red Hat:enterprise_linux:7::client	before 0:12-5.el7	0:12-5.el7
`fwupdate-efi` Red Hat:enterprise_linux:7::client	before 0:12-5.el7	0:12-5.el7
`fwupdate-libs` Red Hat:enterprise_linux:7::client	before 0:12-5.el7	0:12-5.el7
`gcr` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gcr-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gdk-pixbuf2` Red Hat:enterprise_linux:7::client	before 0:2.36.12-3.el7	0:2.36.12-3.el7
`gdk-pixbuf2-debuginfo` Red Hat:enterprise_linux:7::client	before 0:2.36.12-3.el7	0:2.36.12-3.el7
`gdm` Red Hat:enterprise_linux:7::client	before 1:3.28.2-9.el7	1:3.28.2-9.el7
`gdm-debuginfo` Red Hat:enterprise_linux:7::client	before 1:3.28.2-9.el7	1:3.28.2-9.el7
`gedit` Red Hat:enterprise_linux:7::client	before 2:3.28.1-1.el7	2:3.28.1-1.el7
`gedit-debuginfo` Red Hat:enterprise_linux:7::client	before 2:3.28.1-1.el7	2:3.28.1-1.el7
`gedit-plugin-bookmarks` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-bracketcompletion` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-charmap` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-codecomment` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-colorpicker` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-colorschemer` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-commander` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-drawspaces` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-joinlines` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-multiedit` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-smartspaces` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-synctex` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-terminal` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-textsize` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugin-wordcompletion` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugins` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugins-data` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`gedit-plugins-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.1-1.el7	0:3.28.1-1.el7
`geoclue2` Red Hat:enterprise_linux:7::client	before 0:2.4.8-1.el7	0:2.4.8-1.el7
`geoclue2-debuginfo` Red Hat:enterprise_linux:7::client	before 0:2.4.8-1.el7	0:2.4.8-1.el7
`geoclue2-libs` Red Hat:enterprise_linux:7::client	before 0:2.4.8-1.el7	0:2.4.8-1.el7
`geocode-glib` Red Hat:enterprise_linux:7::client	before 0:3.26.0-2.el7	0:3.26.0-2.el7
`geocode-glib-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.26.0-2.el7	0:3.26.0-2.el7
`gjs` Red Hat:enterprise_linux:7::client	before 0:1.52.3-1.el7	0:1.52.3-1.el7
`gjs-debuginfo` Red Hat:enterprise_linux:7::client	before 0:1.52.3-1.el7	0:1.52.3-1.el7
`glade` Red Hat:enterprise_linux:7::client	before 0:3.22.1-1.el7	0:3.22.1-1.el7
`glade-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.22.1-1.el7	0:3.22.1-1.el7
`glade-libs` Red Hat:enterprise_linux:7::client	before 0:3.22.1-1.el7	0:3.22.1-1.el7
`glib-networking` Red Hat:enterprise_linux:7::client	before 0:2.56.1-1.el7	0:2.56.1-1.el7
`glib-networking-debuginfo` Red Hat:enterprise_linux:7::client	before 0:2.56.1-1.el7	0:2.56.1-1.el7
`glib2` Red Hat:enterprise_linux:7::client	before 0:2.56.1-2.el7	0:2.56.1-2.el7
`glib2-debuginfo` Red Hat:enterprise_linux:7::client	before 0:2.56.1-2.el7	0:2.56.1-2.el7
`glibmm24` Red Hat:enterprise_linux:7::client	before 0:2.56.0-1.el7	0:2.56.0-1.el7
`glibmm24-debuginfo` Red Hat:enterprise_linux:7::client	before 0:2.56.0-1.el7	0:2.56.0-1.el7
`gnome-bluetooth` Red Hat:enterprise_linux:7::client	before 1:3.28.2-1.el7	1:3.28.2-1.el7
`gnome-bluetooth-debuginfo` Red Hat:enterprise_linux:7::client	before 1:3.28.2-1.el7	1:3.28.2-1.el7
`gnome-bluetooth-libs` Red Hat:enterprise_linux:7::client	before 1:3.28.2-1.el7	1:3.28.2-1.el7
`gnome-boxes` Red Hat:enterprise_linux:7::client	before 0:3.28.5-2.el7	0:3.28.5-2.el7
`gnome-boxes-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.5-2.el7	0:3.28.5-2.el7
`gnome-calculator` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-calculator-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-classic-session` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-clocks` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-clocks-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-color-manager` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-color-manager-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-contacts` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-contacts-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-desktop3` Red Hat:enterprise_linux:7::client	before 0:3.28.2-2.el7	0:3.28.2-2.el7
`gnome-desktop3-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.2-2.el7	0:3.28.2-2.el7
`gnome-dictionary` Red Hat:enterprise_linux:7::client	before 0:3.26.1-2.el7	0:3.26.1-2.el7
`gnome-dictionary-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.26.1-2.el7	0:3.26.1-2.el7
`gnome-disk-utility` Red Hat:enterprise_linux:7::client	before 0:3.28.3-1.el7	0:3.28.3-1.el7
`gnome-disk-utility-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.3-1.el7	0:3.28.3-1.el7
`gnome-documents` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-documents-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-documents-libs` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-font-viewer` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-font-viewer-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-getting-started-docs` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-initial-setup` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-initial-setup-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-keyring` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-keyring-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-keyring-pam` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-online-accounts` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-online-accounts-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-online-miners` Red Hat:enterprise_linux:7::client	before 0:3.26.0-1.el7	0:3.26.0-1.el7
`gnome-online-miners-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.26.0-1.el7	0:3.26.0-1.el7
`gnome-packagekit` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-packagekit-common` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-packagekit-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-packagekit-installer` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-packagekit-updater` Red Hat:enterprise_linux:7::client	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gnome-screenshot` Red Hat:enterprise_linux:7::client	before 0:3.26.0-1.el7	0:3.26.0-1.el7
`gnome-screenshot-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.26.0-1.el7	0:3.26.0-1.el7
`gnome-session` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-session-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-session-xsession` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-settings-daemon` Red Hat:enterprise_linux:7::client	before 0:3.28.1-2.el7	0:3.28.1-2.el7
`gnome-settings-daemon-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.1-2.el7	0:3.28.1-2.el7
`gnome-shell` Red Hat:enterprise_linux:7::client	before 0:3.28.3-6.el7	0:3.28.3-6.el7
`gnome-shell-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.3-6.el7	0:3.28.3-6.el7
`gnome-shell-extension-alternate-tab` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-shell-extension-apps-menu` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-shell-extension-common` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-shell-extension-launch-new-instance` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-shell-extension-places-menu` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-shell-extension-top-icons` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-shell-extension-user-theme` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-shell-extension-window-list` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-shell-extensions` Red Hat:enterprise_linux:7::client	before 0:3.28.1-5.el7	0:3.28.1-5.el7
`gnome-software` Red Hat:enterprise_linux:7::client	before 0:3.28.2-3.el7	0:3.28.2-3.el7
`gnome-software-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.2-3.el7	0:3.28.2-3.el7
`gnome-system-monitor` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-system-monitor-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gnome-terminal` Red Hat:enterprise_linux:7::client	before 0:3.28.2-2.el7	0:3.28.2-2.el7
`gnome-terminal-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28.2-2.el7	0:3.28.2-2.el7
`gnome-terminal-nautilus` Red Hat:enterprise_linux:7::client	before 0:3.28.2-2.el7	0:3.28.2-2.el7
`gnome-themes-standard` Red Hat:enterprise_linux:7::client	before 0:3.28-2.el7	0:3.28-2.el7
`gnome-themes-standard-debuginfo` Red Hat:enterprise_linux:7::client	before 0:3.28-2.el7	0:3.28-2.el7
`gnome-tweak-tool` Red Hat:enterprise_linux:7::client	before 0:3.28.1-2.el7	0:3.28.1-2.el7
`PackageKit` Red Hat:enterprise_linux:7::computenode	before 0:1.1.10-1.el7	0:1.1.10-1.el7
`PackageKit-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.1.10-1.el7	0:1.1.10-1.el7
`PackageKit-glib` Red Hat:enterprise_linux:7::computenode	before 0:1.1.10-1.el7	0:1.1.10-1.el7
`adwaita-cursor-theme` Red Hat:enterprise_linux:7::computenode	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`adwaita-icon-theme` Red Hat:enterprise_linux:7::computenode	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`at-spi2-atk` Red Hat:enterprise_linux:7::computenode	before 0:2.26.2-1.el7	0:2.26.2-1.el7
`at-spi2-atk-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.26.2-1.el7	0:2.26.2-1.el7
`at-spi2-core` Red Hat:enterprise_linux:7::computenode	before 0:2.28.0-1.el7	0:2.28.0-1.el7
`at-spi2-core-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.28.0-1.el7	0:2.28.0-1.el7
`atk` Red Hat:enterprise_linux:7::computenode	before 0:2.28.1-1.el7	0:2.28.1-1.el7
`atk-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.28.1-1.el7	0:2.28.1-1.el7
`cairo` Red Hat:enterprise_linux:7::computenode	before 0:1.15.12-3.el7	0:1.15.12-3.el7
`cairo-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.15.12-3.el7	0:1.15.12-3.el7
`cairo-gobject` Red Hat:enterprise_linux:7::computenode	before 0:1.15.12-3.el7	0:1.15.12-3.el7
`compat-exiv2-023` Red Hat:enterprise_linux:7::computenode	before 0:0.23-2.el7	0:0.23-2.el7
`compat-exiv2-023-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:0.23-2.el7	0:0.23-2.el7
`compat-libical1` Red Hat:enterprise_linux:7::computenode	before 0:1.0.1-2.el7	0:1.0.1-2.el7
`dconf` Red Hat:enterprise_linux:7::computenode	before 0:0.28.0-4.el7	0:0.28.0-4.el7
`dconf-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:0.28.0-4.el7	0:0.28.0-4.el7
`fontconfig` Red Hat:enterprise_linux:7::computenode	before 0:2.13.0-4.3.el7	0:2.13.0-4.3.el7
`fontconfig-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.13.0-4.3.el7	0:2.13.0-4.3.el7
`freetype` Red Hat:enterprise_linux:7::computenode	before 0:2.8-12.el7	0:2.8-12.el7
`freetype-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.8-12.el7	0:2.8-12.el7
`fribidi` Red Hat:enterprise_linux:7::computenode	before 0:1.0.2-1.el7	0:1.0.2-1.el7
`fribidi-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.0.2-1.el7	0:1.0.2-1.el7
`fwupd` Red Hat:enterprise_linux:7::computenode	before 0:1.0.8-4.el7	0:1.0.8-4.el7
`fwupd-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.0.8-4.el7	0:1.0.8-4.el7
`fwupdate` Red Hat:enterprise_linux:7::computenode	before 0:12-5.el7	0:12-5.el7
`fwupdate-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:12-5.el7	0:12-5.el7
`fwupdate-efi` Red Hat:enterprise_linux:7::computenode	before 0:12-5.el7	0:12-5.el7
`fwupdate-libs` Red Hat:enterprise_linux:7::computenode	before 0:12-5.el7	0:12-5.el7
`gcr` Red Hat:enterprise_linux:7::computenode	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gcr-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:3.28.0-1.el7	0:3.28.0-1.el7
`gdk-pixbuf2` Red Hat:enterprise_linux:7::computenode	before 0:2.36.12-3.el7	0:2.36.12-3.el7
`gdk-pixbuf2-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.36.12-3.el7	0:2.36.12-3.el7
`geoclue2` Red Hat:enterprise_linux:7::computenode	before 0:2.4.8-1.el7	0:2.4.8-1.el7
`geoclue2-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.4.8-1.el7	0:2.4.8-1.el7
`glade` Red Hat:enterprise_linux:7::computenode	before 0:3.22.1-1.el7	0:3.22.1-1.el7
`glade-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:3.22.1-1.el7	0:3.22.1-1.el7
`glade-libs` Red Hat:enterprise_linux:7::computenode	before 0:3.22.1-1.el7	0:3.22.1-1.el7
`glib-networking` Red Hat:enterprise_linux:7::computenode	before 0:2.56.1-1.el7	0:2.56.1-1.el7
`glib-networking-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.56.1-1.el7	0:2.56.1-1.el7
`glib2` Red Hat:enterprise_linux:7::computenode	before 0:2.56.1-2.el7	0:2.56.1-2.el7
`glib2-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.56.1-2.el7	0:2.56.1-2.el7
`glibmm24` Red Hat:enterprise_linux:7::computenode	before 0:2.56.0-1.el7	0:2.56.0-1.el7
`glibmm24-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.56.0-1.el7	0:2.56.0-1.el7
`gnome-bluetooth` Red Hat:enterprise_linux:7::computenode	before 1:3.28.2-1.el7	1:3.28.2-1.el7
`gnome-bluetooth-debuginfo` Red Hat:enterprise_linux:7::computenode	before 1:3.28.2-1.el7	1:3.28.2-1.el7
`gnome-bluetooth-libs` Red Hat:enterprise_linux:7::computenode	before 1:3.28.2-1.el7	1:3.28.2-1.el7
`gnome-user-docs` Red Hat:enterprise_linux:7::computenode	before 0:3.28.2-1.el7	0:3.28.2-1.el7
`gobject-introspection` Red Hat:enterprise_linux:7::computenode	before 0:1.56.1-1.el7	0:1.56.1-1.el7
`gobject-introspection-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.56.1-1.el7	0:1.56.1-1.el7
`google-noto-emoji-fonts` Red Hat:enterprise_linux:7::computenode	before 0:20180508-4.el7	0:20180508-4.el7
`gsettings-desktop-schemas` Red Hat:enterprise_linux:7::computenode	before 0:3.28.0-2.el7	0:3.28.0-2.el7
`gssdp` Red Hat:enterprise_linux:7::computenode	before 0:1.0.2-1.el7	0:1.0.2-1.el7
`gssdp-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.0.2-1.el7	0:1.0.2-1.el7
`gstreamer1-plugins-base` Red Hat:enterprise_linux:7::computenode	before 0:1.10.4-2.el7	0:1.10.4-2.el7
`gstreamer1-plugins-base-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.10.4-2.el7	0:1.10.4-2.el7
`gtk-update-icon-cache` Red Hat:enterprise_linux:7::computenode	before 0:3.22.30-3.el7	0:3.22.30-3.el7
`gtk3` Red Hat:enterprise_linux:7::computenode	before 0:3.22.30-3.el7	0:3.22.30-3.el7
`gtk3-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:3.22.30-3.el7	0:3.22.30-3.el7
`gupnp` Red Hat:enterprise_linux:7::computenode	before 0:1.0.2-5.el7	0:1.0.2-5.el7
`gupnp-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.0.2-5.el7	0:1.0.2-5.el7
`gupnp-igd` Red Hat:enterprise_linux:7::computenode	before 0:0.2.5-2.el7	0:0.2.5-2.el7
`gupnp-igd-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:0.2.5-2.el7	0:0.2.5-2.el7
`harfbuzz` Red Hat:enterprise_linux:7::computenode	before 0:1.7.5-2.el7	0:1.7.5-2.el7
`harfbuzz-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.7.5-2.el7	0:1.7.5-2.el7
`harfbuzz-icu` Red Hat:enterprise_linux:7::computenode	before 0:1.7.5-2.el7	0:1.7.5-2.el7
`json-glib` Red Hat:enterprise_linux:7::computenode	before 0:1.4.2-2.el7	0:1.4.2-2.el7
`json-glib-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.4.2-2.el7	0:1.4.2-2.el7
`libappstream-glib` Red Hat:enterprise_linux:7::computenode	before 0:0.7.8-2.el7	0:0.7.8-2.el7
`libappstream-glib-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:0.7.8-2.el7	0:0.7.8-2.el7
`libcroco` Red Hat:enterprise_linux:7::computenode	before 0:0.6.12-4.el7	0:0.6.12-4.el7
`libcroco-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:0.6.12-4.el7	0:0.6.12-4.el7
`libgnomekbd` Red Hat:enterprise_linux:7::computenode	before 0:3.26.0-1.el7	0:3.26.0-1.el7
`libgnomekbd-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:3.26.0-1.el7	0:3.26.0-1.el7
`libical` Red Hat:enterprise_linux:7::computenode	before 0:3.0.3-2.el7	0:3.0.3-2.el7
`libical-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:3.0.3-2.el7	0:3.0.3-2.el7
`libjpeg-turbo` Red Hat:enterprise_linux:7::computenode	before 0:1.2.90-6.el7	0:1.2.90-6.el7
`libjpeg-turbo-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.2.90-6.el7	0:1.2.90-6.el7
`librsvg2` Red Hat:enterprise_linux:7::computenode	before 0:2.40.20-1.el7	0:2.40.20-1.el7
`librsvg2-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.40.20-1.el7	0:2.40.20-1.el7
`libsoup` SUSE:Linux Enterprise Desktop 12 SP3	before 2.62.2-5.7.1	2.62.2-5.7.1
`libsoup` SUSE:Linux Enterprise Software Development Kit 12 SP3	before 2.62.2-5.7.1	2.62.2-5.7.1
`libsoup` SUSE:Linux Enterprise Server 12 SP3	before 2.62.2-5.7.1	2.62.2-5.7.1
`libsoup` SUSE:Linux Enterprise Server for SAP Applications 12 SP3	before 2.62.2-5.7.1	2.62.2-5.7.1
`libsoup` SUSE:OpenStack Cloud 7	before 2.62.2-5.7.1	2.62.2-5.7.1
`libsoup` SUSE:Linux Enterprise Server for SAP Applications 12 SP2	before 2.62.2-5.7.1	2.62.2-5.7.1
`libsoup` SUSE:Linux Enterprise Server 12 SP2-LTSS	before 2.62.2-5.7.1	2.62.2-5.7.1
`libsoup` SUSE:Enterprise Storage 4	before 2.62.2-5.7.1	2.62.2-5.7.1
`libsoup2.4` Ubuntu:14.04:LTS	before 2.44.2-1ubuntu2.3, plus listed versions 2.42.2-62.44.1-12.44.2-12.44.2-1ubuntu12.44.2-1ubuntu22.44.2-1ubuntu2.12.44.2-1ubuntu2.2	2.44.2-1ubuntu2.3
`libsoup2.4` Ubuntu:16.04:LTS	before 2.52.2-1ubuntu0.3, plus listed versions 2.50.0-2debian12.52.1-12.52.2-12.52.2-1ubuntu0.12.52.2-1ubuntu0.2	2.52.2-1ubuntu0.3
`libsoup2.4` Ubuntu:18.04:LTS	before 2.62.1-1ubuntu0.1, plus listed versions 2.60.1-12.60.2-12.60.2-22.60.3-12.61.90-12.62.0-12.62.1-1	2.62.1-1ubuntu0.1
`libsoup` openSUSE:Leap 15.0	before 2.62.2-lp150.2.3.1	2.62.2-lp150.2.3.1
`libsoup` openSUSE:Tumbleweed	before 2.72.0-2.5	2.72.0-2.5

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-12910 is a critical vulnerability (CVSS 9.8) in Gnome Libsoup, published June 29, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.19%, the 90th percentile. Fixed in libsoup2.4 2.62.2-2.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 518 package rows and 91 references. The JSON record has them. Also not on the record: 1,210 package claims. ID and package lookups still check them.