Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2023-41074

Опубликовано: 28 сент. 2023
Источник: redhat
CVSS3: 8.8

Описание

The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.

Отчет

The webkitgtk versions as shipped with Red Hat Enterprise Linux 8 and 9 are not affected by this vulnerability. This flaw relies on webkitgtk's JIT to be enabled while this feature was previously disabled in Red Hat Enterprise Linux 8 and 9 by the following erratas: Red Hat Enterprise Linux 8: https://access.redhat.com/errata/RHSA-2023:4202 Red Hat Enterprise Linux 9: https://access.redhat.com/errata/RHSA-2023:4201

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6webkitgtkOut of support scope
Red Hat Enterprise Linux 7webkitgtk3Out of support scope
Red Hat Enterprise Linux 7 Extended Lifecycle Supportwebkitgtk4FixedRHSA-2025:1036407.07.2025
Red Hat Enterprise Linux 8webkit2gtk3FixedRHSA-2023:420218.07.2023
Red Hat Enterprise Linux 9webkit2gtk3FixedRHSA-2023:420118.07.2023

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=2241412webkitgtk: processing web content may lead to arbitrary code execution

8.8 High

CVSS3

Связанные уязвимости

ubuntu логотип

CVE-2023-41074

CVSS3: 8.8
ubuntu
больше 2 лет назад

The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.

nvd логотип

CVE-2023-41074

CVSS3: 8.8
nvd
больше 2 лет назад

The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.

debian логотип

CVE-2023-41074

CVSS3: 8.8
debian
больше 2 лет назад

The issue was addressed with improved checks. This issue is fixed in t ...

github логотип

GHSA-xq9m-9whg-jv3m

CVSS3: 8.8
github
больше 2 лет назад

The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.

fstec логотип

BDU:2023-07389

CVSS3: 8.8
fstec
больше 2 лет назад

Уязвимость модуля отображения веб-страниц WebKit операционных систем iOS, tvOS, iPadOS, MacOS, watchOS, позволяющая нарушителю выполнить произвольный код

8.8 High

CVSS3