Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2024-54502

Опубликовано: 11 дек. 2024
Источник: redhat
CVSS3: 6.5
EPSS Низкий

Описание

The issue was addressed with improved checks. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash.

A vulnerability was found in Webkit. Processing maliciously crafted web content may lead to an unexpected process crash.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6webkitgtkOut of support scope
Red Hat Enterprise Linux 7webkitgtk3Will not fix
Red Hat Enterprise Linux 7webkitgtk4Affected
Red Hat Enterprise Linux 8webkit2gtk3FixedRHSA-2025:014509.01.2025
Red Hat Enterprise Linux 8.2 Advanced Update Supportwebkit2gtk3FixedRHSA-2025:027613.01.2025
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportwebkit2gtk3FixedRHSA-2025:027813.01.2025
Red Hat Enterprise Linux 8.4 Telecommunications Update Servicewebkit2gtk3FixedRHSA-2025:027813.01.2025
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutionswebkit2gtk3FixedRHSA-2025:027813.01.2025
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportwebkit2gtk3FixedRHSA-2025:027713.01.2025
Red Hat Enterprise Linux 8.6 Telecommunications Update Servicewebkit2gtk3FixedRHSA-2025:027713.01.2025

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=2333843webkit: Processing maliciously crafted web content may lead to an unexpected process crash

EPSS

Процентиль: 46%
0.00232
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
6 месяцев назад

The issue was addressed with improved checks. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS3: 6.5
nvd
6 месяцев назад

The issue was addressed with improved checks. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS3: 6.5
debian
6 месяцев назад

The issue was addressed with improved checks. This issue is fixed in w ...

CVSS3: 6.5
github
6 месяцев назад

The issue was addressed with improved checks. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS3: 6.5
fstec
6 месяцев назад

Уязвимость модулей отображения веб-страниц WPE WebKit и WebKitGTK, связанная с чтением за границами буфера данных, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 46%
0.00232
Низкий

6.5 Medium

CVSS3

Уязвимость CVE-2024-54502