Поиск уязвимостей
Количество 11
Количество 11
GHSA-f6vf-7m59-gfmp
The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service (Buffer Overflow) or possibly have unspecified other impact, related to UIProcess/API/gtk/WebKitScriptDialogGtk.cpp, UIProcess/API/gtk/WebKitScriptDialogImpl.cpp, and UIProcess/API/gtk/WebKitWebViewGtk.cpp, as demonstrated by GNOME Web (aka Epiphany).
CVE-2019-8375
The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service (Buffer Overflow) or possibly have unspecified other impact, related to UIProcess/API/gtk/WebKitScriptDialogGtk.cpp, UIProcess/API/gtk/WebKitScriptDialogImpl.cpp, and UIProcess/API/gtk/WebKitWebViewGtk.cpp, as demonstrated by GNOME Web (aka Epiphany).
CVE-2019-8375
The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service (Buffer Overflow) or possibly have unspecified other impact, related to UIProcess/API/gtk/WebKitScriptDialogGtk.cpp, UIProcess/API/gtk/WebKitScriptDialogImpl.cpp, and UIProcess/API/gtk/WebKitWebViewGtk.cpp, as demonstrated by GNOME Web (aka Epiphany).
CVE-2019-8375
The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.9 ...
openSUSE-SU-2019:1316-1
Security update for webkit2gtk3
openSUSE-SU-2019:1206-1
Security update for webkit2gtk3
SUSE-SU-2019:1030-1
Security update for webkit2gtk3
SUSE-SU-2019:0890-1
Security update for webkit2gtk3
BDU:2019-02463
Уязвимость подсистемы UIProcess модулей отображения веб-страниц WebKitGTK+, WebKitGTK, позволяющая нарушителю вызвать отказ в обслуживании или оказать воздействие на конфиденциальность и целостность защищаемой информации
ALT-PU-2019-4175
ALT-PU-2019-4175: package `libwebkitgtk4` update to version 2.22.7-alt1
ALT-PU-2019-1453
ALT-PU-2019-1453: package `libwebkitgtk4` update to version 2.24.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-f6vf-7m59-gfmp The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service (Buffer Overflow) or possibly have unspecified other impact, related to UIProcess/API/gtk/WebKitScriptDialogGtk.cpp, UIProcess/API/gtk/WebKitScriptDialogImpl.cpp, and UIProcess/API/gtk/WebKitWebViewGtk.cpp, as demonstrated by GNOME Web (aka Epiphany). | CVSS3: 9.8 | 16% Средний | больше 4 лет назад |
 | CVE-2019-8375 The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service (Buffer Overflow) or possibly have unspecified other impact, related to UIProcess/API/gtk/WebKitScriptDialogGtk.cpp, UIProcess/API/gtk/WebKitScriptDialogImpl.cpp, and UIProcess/API/gtk/WebKitWebViewGtk.cpp, as demonstrated by GNOME Web (aka Epiphany). | CVSS3: 9.8 | 16% Средний | больше 7 лет назад |
 | CVE-2019-8375 The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service (Buffer Overflow) or possibly have unspecified other impact, related to UIProcess/API/gtk/WebKitScriptDialogGtk.cpp, UIProcess/API/gtk/WebKitScriptDialogImpl.cpp, and UIProcess/API/gtk/WebKitWebViewGtk.cpp, as demonstrated by GNOME Web (aka Epiphany). | CVSS3: 9.8 | 16% Средний | больше 7 лет назад |
| CVE-2019-8375 The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.9 ... | CVSS3: 9.8 | 16% Средний | больше 7 лет назад |
 | openSUSE-SU-2019:1316-1 Security update for webkit2gtk3 | 16% Средний | больше 7 лет назад | |
| openSUSE-SU-2019:1206-1 Security update for webkit2gtk3 | 16% Средний | больше 7 лет назад | |
| SUSE-SU-2019:1030-1 Security update for webkit2gtk3 | 16% Средний | больше 7 лет назад | |
| SUSE-SU-2019:0890-1 Security update for webkit2gtk3 | 16% Средний | больше 7 лет назад | |
 | BDU:2019-02463 Уязвимость подсистемы UIProcess модулей отображения веб-страниц WebKitGTK+, WebKitGTK, позволяющая нарушителю вызвать отказ в обслуживании или оказать воздействие на конфиденциальность и целостность защищаемой информации | CVSS3: 9.8 | 16% Средний | больше 7 лет назад |
| ALT-PU-2019-4175 ALT-PU-2019-4175: package `libwebkitgtk4` update to version 2.22.7-alt1 | CVSS3: 9.8 | 16% Средний | больше 7 лет назад |
| ALT-PU-2019-1453 ALT-PU-2019-1453: package `libwebkitgtk4` update to version 2.24.0-alt1 | CVSS3: 9.8 | 16% Средний | больше 7 лет назад |
Уязвимостей на страницу