Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2023:7716

Опубликовано: 09 янв. 2024
Источник: rocky
Оценка: Important

Описание

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

  • webkitgtk: Arbitrary Remote Code Execution (CVE-2023-42917)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
webkit2gtk3x86_641.el8_9.1webkit2gtk3-2.40.5-1.el8_9.1.x86_64.rpm
webkit2gtk3-develx86_641.el8_9.1webkit2gtk3-devel-2.40.5-1.el8_9.1.x86_64.rpm
webkit2gtk3-jscx86_641.el8_9.1webkit2gtk3-jsc-2.40.5-1.el8_9.1.x86_64.rpm
webkit2gtk3-jsc-develx86_641.el8_9.1webkit2gtk3-jsc-devel-2.40.5-1.el8_9.1.x86_64.rpm

Показывать по

Связанные CVE

CVE-2023-42917

Ссылки на источники

Исправления

Связанные уязвимости

ubuntu логотип

CVE-2023-42917

CVSS3: 8.8
ubuntu
больше 1 года назад

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

redhat логотип

CVE-2023-42917

CVSS3: 8.8
redhat
больше 1 года назад

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

nvd логотип

CVE-2023-42917

CVSS3: 8.8
nvd
больше 1 года назад

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

debian логотип

CVE-2023-42917

CVSS3: 8.8
debian
больше 1 года назад

A memory corruption vulnerability was addressed with improved locking. ...

github логотип

GHSA-phhr-cqm7-gjv6

CVSS3: 8.8
github
больше 1 года назад

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.