Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2022-32792

Опубликовано: 04 июл. 2022
Источник: redhat
CVSS3: 8.8
EPSS Низкий

Описание

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution.

A vulnerability was found in webkit. This issue occurs when processing maliciously crafted web content which may lead to arbitrary code execution.

Отчет

This flaw is being rated as 'Moderate' as WebKitGTK package is shipped as a dependency for Gnome package, additionally Red Hat Enterprise Linux doesn't ship any WebKitGTK based web browser where this flaw would present a higher severity major threat.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6webkitgtkOut of support scope
Red Hat Enterprise Linux 7webkitgtk3Out of support scope
Red Hat Enterprise Linux 7 Extended Lifecycle Supportwebkitgtk4FixedRHSA-2025:1036407.07.2025
Red Hat Enterprise Linux 8glib2FixedRHSA-2022:770408.11.2022
Red Hat Enterprise Linux 8webkit2gtk3FixedRHSA-2022:770408.11.2022
Red Hat Enterprise Linux 8glib2FixedRHSA-2022:770408.11.2022
Red Hat Enterprise Linux 8webkit2gtk3FixedRHSA-2022:770408.11.2022
Red Hat Enterprise Linux 9webkit2gtk3FixedRHSA-2022:805415.11.2022

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-787
https://bugzilla.redhat.com/show_bug.cgi?id=2238973webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution

EPSS

Процентиль: 79%
0.01991
Низкий

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 4 года назад

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS3: 8.8
nvd
почти 4 года назад

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS3: 8.8
debian
почти 4 года назад

An out-of-bounds write issue was addressed with improved input validat ...

CVSS3: 8.8
github
почти 4 года назад

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution.

suse-cvrf
около 4 лет назад

Security update for webkit2gtk3

EPSS

Процентиль: 79%
0.01991
Низкий

8.8 High

CVSS3

Уязвимость CVE-2022-32792