Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-1000122

Опубликовано: 01 нояб. 2017
Источник: nvd
CVSS3: 5.3
CVSS2: 5
EPSS Низкий

Описание

The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate certain message metadata, allowing a compromised secondary process to cause a denial of service (release assertion) of the UI process. This vulnerability does not affect Apple products.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:webkitgtk:webkitgtk\+:*:*:*:*:*:*:*:*
Версия до 2.16.3 (исключая)

EPSS

Процентиль: 59%
0.00377
Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 8 лет назад

The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate certain message metadata, allowing a compromised secondary process to cause a denial of service (release assertion) of the UI process. This vulnerability does not affect Apple products.

CVSS3: 5.3
debian
больше 8 лет назад

The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, do ...

CVSS3: 5.3
github
больше 3 лет назад

The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate certain message metadata, allowing a compromised secondary process to cause a denial of service (release assertion) of the UI process. This vulnerability does not affect Apple products.

EPSS

Процентиль: 59%
0.00377
Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20