Vulnerabilities > CVE-2018-11396 - Unspecified vulnerability in Gnome Epiphany
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
ephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via JavaScript code that triggers access to a NULL URL, as demonstrated by a crafted window.open call.
Vulnerable Configurations
Exploit-Db
description | Epiphany 3.28.2.1 - Denial of Service. Dos exploit for Multiple platform |
id | EDB-ID:44821 |
last seen | 2018-06-01 |
modified | 2018-06-01 |
published | 2018-06-01 |
reporter | Exploit-DB |
source | https://www.exploit-db.com/download/44821/ |
title | Epiphany 3.28.2.1 - Denial of Service |
Nessus
NASL family Fedora Local Security Checks NASL id FEDORA_2018-A5E45FC9F7.NASL description - Fix CVE-2018-11396/CVE-2018-12016 (#795740) - Allow Ctrl+T in app mode again due to unintended consequences (#796204) - Don last seen 2020-06-05 modified 2019-01-03 plugin id 120678 published 2019-01-03 reporter This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/120678 title Fedora 28 : 1:epiphany (2018-a5e45fc9f7) code #%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Fedora Security Advisory FEDORA-2018-a5e45fc9f7. # include("compat.inc"); if (description) { script_id(120678); script_version("1.4"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/06/04"); script_cve_id("CVE-2018-11396", "CVE-2018-12016"); script_xref(name:"FEDORA", value:"2018-a5e45fc9f7"); script_name(english:"Fedora 28 : 1:epiphany (2018-a5e45fc9f7)"); script_summary(english:"Checks rpm output for the updated package."); script_set_attribute( attribute:"synopsis", value:"The remote Fedora host is missing a security update." ); script_set_attribute( attribute:"description", value: " - Fix CVE-2018-11396/CVE-2018-12016 (#795740) - Allow Ctrl+T in app mode again due to unintended consequences (#796204) - Don't remember passwords when the setting is disabled (#796219) - Fix password manager crash on chase.com (GitLab #11) Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues." ); script_set_attribute( attribute:"see_also", value:"https://bodhi.fedoraproject.org/updates/FEDORA-2018-a5e45fc9f7" ); script_set_attribute( attribute:"solution", value:"Update the affected 1:epiphany package." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P"); script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"); script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available"); script_set_attribute(attribute:"exploit_available", value:"true"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:1:epiphany"); script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:28"); script_set_attribute(attribute:"vuln_publication_date", value:"2018/05/23"); script_set_attribute(attribute:"patch_publication_date", value:"2018/06/15"); script_set_attribute(attribute:"plugin_publication_date", value:"2019/01/03"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Fedora Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/RedHat/release"); if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora"); os_ver = pregmatch(pattern: "Fedora.*release ([0-9]+)", string:release); if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora"); os_ver = os_ver[1]; if (! preg(pattern:"^28([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 28", "Fedora " + os_ver); if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu); flag = 0; if (rpm_check(release:"FC28", reference:"epiphany-3.28.3.1-1.fc28", epoch:"1")) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_WARNING, extra : rpm_report_get() ); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "1:epiphany"); }
NASL family SuSE Local Security Checks NASL id OPENSUSE-2019-2318.NASL description This update for epiphany fixes the following issues : - CVE-2018-11396: Fixed a JavaScript crash when an invalid URI is opened (boo#1094464). last seen 2020-06-01 modified 2020-06-02 plugin id 129999 published 2019-10-17 reporter This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/129999 title openSUSE Security Update : epiphany (openSUSE-2019-2318) NASL family Fedora Local Security Checks NASL id FEDORA_2018-DE5457B0A2.NASL description - Ensure search engine migration does not fail (#794645) - Do not open adblock filters when automatic open downloads is enabled (#794646) - Fix crash destroying sync service (#794728) - Fix CVE-2018-11396/CVE-2018-12016 (#795740) - Do not use Fanboy last seen 2020-06-05 modified 2018-06-25 plugin id 110673 published 2018-06-25 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/110673 title Fedora 27 : 1:epiphany (2018-de5457b0a2)
Packetstorm
data source | https://packetstormsecurity.com/files/download/148008/epiphany32821-dos.txt |
id | PACKETSTORM:148008 |
last seen | 2018-06-05 |
published | 2018-06-01 |
reporter | Mishra Dhiraj |
source | https://packetstormsecurity.com/files/148008/Epiphany-3.28.2.1-Denial-Of-Service.html |
title | Epiphany 3.28.2.1 Denial Of Service |