Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-32923

Опубликовано: 01 нояб. 2022
Источник: debian

Описание

A correctness issue in the JIT was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose internal states of the app.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
webkit2gtkfixed2.38.0-1package
wpewebkitfixed2.38.0-1package

Примечания

  • https://webkitgtk.org/security/WSA-2022-0010.html

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 2 лет назад

A correctness issue in the JIT was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose internal states of the app.

CVSS3: 6.5
redhat
больше 2 лет назад

A correctness issue in the JIT was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose internal states of the app.

CVSS3: 6.5
nvd
больше 2 лет назад

A correctness issue in the JIT was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose internal states of the app.

CVSS3: 6.5
github
больше 2 лет назад

A correctness issue in the JIT was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose internal states of the app.

CVSS3: 6.5
fstec
больше 2 лет назад

Уязвимость модулей отображения веб-страниц WebKitGTK и WPE WebKit, связанная с ошибками управления состоянием, позволяющая нарушителю получить доступ к конфиденциальным данным