Summary
A large number of security issues were discovered in the WebKitGTK+ Web and
JavaScript engines. If a user were tricked into viewing a malicious
website, a remote attacker could exploit a variety of issues related to web
browser security, including cross-site scripting attacks, denial of service
attacks, and arbitrary code execution.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | webkit2gtk | 2.22.2-0ubuntu0.18.04.1 |
Vulnerabilities 24
-
Unscored —
A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, tvOS 12…
-
Unscored —CVE-2018-4197 Public exploit
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvO…
-
Unscored —
In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes bef…
-
Unscored —
In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes bef…
-
Unscored —
In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes bef…
-
Unscored —
In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an arra…
-
Unscored —
In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes bef…
-
Unscored —
In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes bef…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to i…
-
Unscored —CVE-2018-4306 Public exploit
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvO…
-
Unscored —
A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affec…
-
Unscored —
The issue was addressed by removing origin information. This issue affected versions prior to iOS 12, watchOS 5, Safari…
-
Unscored —CVE-2018-4312 Public exploit
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvO…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvO…
-
Unscored —CVE-2018-4315 Public exploit
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvO…
-
Unscored —
A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12, t…
-
Unscored —CVE-2018-4317 Public exploit
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvO…
-
Unscored —CVE-2018-4318 Public exploit
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvO…
-
Unscored —
A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. Thi…
-
Unscored —CVE-2018-4323 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to i…
-
Unscored —CVE-2018-4328 Public exploit
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to i…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to i…
-
Unscored —
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to i…
-
Unscored —
A memory consumption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, t…
References
-
report
https://ubuntu.com/security/CVE-2018-4191
-
report
https://ubuntu.com/security/CVE-2018-4197
-
report
https://ubuntu.com/security/CVE-2018-4207
-
report
https://ubuntu.com/security/CVE-2018-4208
-
report
https://ubuntu.com/security/CVE-2018-4209
-
report
https://ubuntu.com/security/CVE-2018-4210
-
report
https://ubuntu.com/security/CVE-2018-4212
-
report
https://ubuntu.com/security/CVE-2018-4213
-
report
https://ubuntu.com/security/CVE-2018-4299
-
report
https://ubuntu.com/security/CVE-2018-4306
-
report
https://ubuntu.com/security/CVE-2018-4309
-
report
https://ubuntu.com/security/CVE-2018-4311
-
report
https://ubuntu.com/security/CVE-2018-4312
-
report
https://ubuntu.com/security/CVE-2018-4314
-
report
https://ubuntu.com/security/CVE-2018-4315
-
report
https://ubuntu.com/security/CVE-2018-4316
-
report
https://ubuntu.com/security/CVE-2018-4317
-
report
https://ubuntu.com/security/CVE-2018-4318
-
report
https://ubuntu.com/security/CVE-2018-4319
-
report
https://ubuntu.com/security/CVE-2018-4323
-
report
https://ubuntu.com/security/CVE-2018-4328
-
report
https://ubuntu.com/security/CVE-2018-4358
-
report
https://ubuntu.com/security/CVE-2018-4359
-
report
https://ubuntu.com/security/CVE-2018-4361