CVE-2018-6849

In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com)…

published April 1, 2018

CVSS
—
EPSS
29%
Percentile
98.1
In the wild
Unconfirmed
What it is

In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com), the browser can disclose a private IP address in a STUN request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.28713 · 98.1th percentile
Published
2018-04-01T18:00Z
EPSS history
Timeline
  • 01 APR 18:00Z
    In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com)…
    cvelistv5