USN-6545-1 — webkit2gtk vulnerabilities

Summary

Several security issues were discovered in the WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a remote
attacker could exploit a variety of issues related to web browser security,
including cross-site scripting attacks, denial of service attacks, and
arbitrary code execution.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 22.04 LTS 22.04:LTS	webkit2gtk	2.42.3-0ubuntu0.22.04.1

Vulnerabilities 2

High 8.8

CVE-2023-42917 Exploited

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu Wolfi

Nov 30, 2023
KEV Dec 4, 2023
Medium 6.5

CVE-2023-42916 Exploited EPSS 18%

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Nov 30, 2023
KEV Dec 4, 2023

References

report
https://ubuntu.com/security/CVE-2023-42916
report
https://ubuntu.com/security/CVE-2023-42917

webkit2gtk vulnerabilities

Summary

Fixed packages 1

Vulnerabilities 2

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.…

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2…

References