Google Chrome / Microsoft Edge: Schwachstelle ermöglicht Codeausführung

Summary

Product

Vulnerabilities 2

• High 8.8
  CVE-2023-4863 Exploited Public exploit EPSS 100%

  libwebp: OOB write in BuildHuffmanTable

  Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

  Google Chrome libwebp chromium Browsers Debian Ubuntu Azure Linux Alpine Wolfi npm PyPI Go crates.io NuGet
  Sep 12, 2023

  KEV Sep 13, 2023
• Unscored —
  CVE-2023-5129 Rejected

  This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate of CVE-2023-4863.

  tiledb Alpine
  Sep 25, 2023

Revision history

1. 2025-01-14 #17

   Neue Updates von Fortinet aufgenommen

2. 2024-02-20 #16

   Neue Updates von HP aufgenommen

3. 2023-12-05 #15

   Neue Updates von Dell aufgenommen

4. 2023-11-01 #14

   Neue Updates von WatchGuard aufgenommen

5. 2023-10-19 #13

   Neue Updates von Amazon aufgenommen

6. 2023-10-10 #12

   Neue Updates von Elastic aufgenommen

7. 2023-10-01 #11

   Neue Updates von Fedora und NetApp aufgenommen

8. 2023-09-28 #10

   Neue Updates von Fedora aufgenommen

9. 2023-09-27 #9

   Neue Updates von Ubuntu und SUSE aufgenommen

10. 2023-09-26 #8

    Neue Updates aufgenommen

11. 2023-09-24 #7

    Neue Updates von Fedora aufgenommen

12. 2023-09-20 #6

    Neue Updates von Red Hat und Oracle Linux aufgenommen

13. 2023-09-18 #5

    Neue Updates von Red Hat und Fedora aufgenommen

14. 2023-09-17 #4

    Neue Updates von Fedora aufgenommen

15. 2023-09-13 #3

    Neue Updates von Fedora aufgenommen

16. 2023-09-12 #2

    Neue Updates aufgenommen

17. 2023-09-11 #1

    Initiale Fassung

References

• Google Chrome Stable Channel Update for Desktop vom 2023-09-11
  https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html
• Microsoft Leitfaden für Sicherheiztsupdates vom 2023-09-12
  https://msrc.microsoft.com/update-guide/
• Fedora Security Advisory FEDORA-2023-D5FAEDE1D6 vom 2023-09-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-d5faede1d6
• Fedora Security Advisory FEDORA-2023-F8319BD876 vom 2023-09-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-f8319bd876
• Fedora Security Advisory FEDORA-2023-C4FA8A204D vom 2023-09-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-c4fa8a204d
• Fedora Security Advisory FEDORA-2023-3388038193 vom 2023-09-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-3388038193
• Fedora Security Advisory FEDORA-2023-509640A8A6 vom 2023-09-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-509640a8a6
• Fedora Security Advisory FEDORA-EPEL-2023-788F9BBB3F vom 2023-09-13
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-788f9bbb3f
• Fedora Security Advisory FEDORA-2023-32FA4259F4 vom 2023-09-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-32fa4259f4
• Fedora Security Advisory FEDORA-EPEL-2023-9A6FD7A504 vom 2023-09-13
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-9a6fd7a504
• Fedora Security Advisory FEDORA-2023-3D1935DC6A vom 2023-09-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-3d1935dc6a
• Fedora Security Advisory FEDORA-EPEL-2023-EA08732E6A vom 2023-09-17
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-ea08732e6a
• Fedora Security Advisory FEDORA-2023-D58A84DDA8 vom 2023-09-17
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-d58a84dda8
• Fedora Security Advisory FEDORA-2023-0DE0929147 vom 2023-09-17
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-0de0929147
• Fedora Security Advisory FEDORA-EPEL-2023-C66924CB92 vom 2023-09-17
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-c66924cb92
• Fedora Security Advisory FEDORA-EPEL-2023-54433BC31F vom 2023-09-17
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-54433bc31f
• Fedora Security Advisory FEDORA-2023-3BFB63F6D2 vom 2023-09-17
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-3bfb63f6d2
• Red Hat Security Advisory RHSA-2023:5185 vom 2023-09-18
  https://access.redhat.com/errata/RHSA-2023:5185
• Fedora Security Advisory FEDORA-EPEL-2023-0DF1F37A48 vom 2023-09-18
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-0df1f37a48
• Fedora Security Advisory FEDORA-2023-A33B8C01E7 vom 2023-09-18
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-a33b8c01e7
• Fedora Security Advisory FEDORA-EPEL-2023-05DC047BF8 vom 2023-09-18
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-05dc047bf8
• Fedora Security Advisory FEDORA-EPEL-2023-79B0154754 vom 2023-09-18
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-79b0154754
• Fedora Security Advisory FEDORA-2023-B427F54E68 vom 2023-09-18
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-b427f54e68
• Red Hat Security Advisory RHSA-2023:5222 vom 2023-09-19
  https://access.redhat.com/errata/RHSA-2023:5222
• Red Hat Security Advisory RHSA-2023:5214 vom 2023-09-19
  https://access.redhat.com/errata/RHSA-2023:5214
• Red Hat Security Advisory RHSA-2023:5309 vom 2023-09-20
  https://access.redhat.com/errata/RHSA-2023:5309
• Oracle Linux Security Advisory ELSA-2023-5309 vom 2023-09-20
  https://linux.oracle.com/errata/ELSA-2023-5309.html
• Oracle Linux Security Advisory ELSA-2023-5214 vom 2023-09-20
  http://linux.oracle.com/errata/ELSA-2023-5214.html
• Fedora Security Advisory FEDORA-2023-DA064561FA vom 2023-09-24
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-da064561fa
• Fedora Security Advisory FEDORA-EPEL-2023-9ABC3565B5 vom 2023-09-24
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-9abc3565b5
• Fedora Security Advisory FEDORA-EPEL-2023-09CC239FE3 vom 2023-09-24
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-09cc239fe3
• Important release of LibreOffice
  https://blog.documentfoundation.org/blog/2023/09/26/lo-762-and-lo-757/
• Ubuntu Security Notice USN-6369-2 vom 2023-09-28
  https://ubuntu.com/security/notices/USN-6369-2
• SUSE Security Update SUSE-SU-2023:3829-1 vom 2023-09-27
  https://lists.suse.com/pipermail/sle-security-updates/2023-September/016363.html
• Fedora Security Advisory FEDORA-2023-E692A72898 vom 2023-09-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-e692a72898
• Fedora Security Advisory FEDORA-2023-9108CDA47C vom 2023-09-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-9108cda47c
• Fedora Security Advisory FEDORA-2023-2A0668FE43 vom 2023-09-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-2a0668fe43
• Fedora Security Advisory FEDORA-EPEL-2023-CCA1F87440 vom 2023-09-30
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-cca1f87440
• Fedora Security Advisory FEDORA-2023-0CD03C3746 vom 2023-09-30
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-0cd03c3746
• Fedora Security Advisory FEDORA-2023-C890266D3F vom 2023-09-30
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-c890266d3f
• Fedora Security Advisory FEDORA-2023-D66A01AD4F vom 2023-09-30
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-d66a01ad4f
• Fedora Security Advisory FEDORA-EPEL-2023-8F3E1B6F78 vom 2023-09-30
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-8f3e1b6f78
• Fedora Security Advisory FEDORA-EPEL-2023-EDC9C74369 vom 2023-09-30
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-edc9c74369
• NetApp Security Advisory NTAP-20230929-0011 vom 2023-09-29
  https://security.netapp.com/advisory/ntap-20230929-0011/
• Elastic Security Announcement ESA-2023-19 vom 2023-10-10
  https://discuss.elastic.co/t/kibana-8-10-3-7-17-14-security-update/344735
• Amazon Linux Security Advisory ALAS2-2023-2290 vom 2023-10-20
  https://alas.aws.amazon.com/AL2/ALAS-2023-2290.html
• WatchGuard Security Advisory WGSA-2023-00008 vom 2023-11-01
  https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2023-00008
• Dell Security Advisory DSA-2023-396 vom 2023-12-06
  https://www.dell.com/support/kbdoc/000218770/dsa-2023-=
• HP Security Bulletin HPSBPI03916 vom 2024-02-13
  https://support.hp.com/us-en/document/ish_10173649-10204798-16/HPSBPI03916
• FortiGuard Labs PSIRT Advisory FG-IR-23-381 vom 2025-01-14
  https://www.fortiguard.com/psirt/FG-IR-23-381