Summary
A large number of security issues were discovered in the WebKitGTK+ Web and
JavaScript engines. If a user were tricked into viewing a malicious
website, a remote attacker could exploit a variety of issues related to web
browser security, including cross-site scripting attacks, denial of service
attacks, and arbitrary code execution.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | webkit2gtk | 2.20.5-0ubuntu0.16.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | webkit2gtk | 2.20.5-0ubuntu0.18.04.1 |
Vulnerabilities 14
-
Unscored —
WebKitGTK+ 2.20.3 has an off-by-one error, with a resultant out-of-bounds write, in the get_simple_globs functions in T…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iClou…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to i…
-
Unscored —
In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows befo…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to i…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to i…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to i…
-
Unscored —
A race condition was addressed with additional validation. This issue affected versions prior toiVersions prior to: OS …
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to i…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to i…
-
Unscored —
Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to …
-
Unscored —
In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows befo…
-
Unscored —
A type confusion issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, t…
References
-
report
https://ubuntu.com/security/CVE-2018-4246
-
report
https://ubuntu.com/security/CVE-2018-4261
-
report
https://ubuntu.com/security/CVE-2018-4262
-
report
https://ubuntu.com/security/CVE-2018-4263
-
report
https://ubuntu.com/security/CVE-2018-4264
-
report
https://ubuntu.com/security/CVE-2018-4265
-
report
https://ubuntu.com/security/CVE-2018-4266
-
report
https://ubuntu.com/security/CVE-2018-4267
-
report
https://ubuntu.com/security/CVE-2018-4270
-
report
https://ubuntu.com/security/CVE-2018-4272
-
report
https://ubuntu.com/security/CVE-2018-4273
-
report
https://ubuntu.com/security/CVE-2018-4278
-
report
https://ubuntu.com/security/CVE-2018-4284
-
report
https://ubuntu.com/security/CVE-2018-12911