A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free vulnerability. This flaw allows attackers with network access to pass specially crafted web content files, causing a denial of service or arbitrary code execution. This CVE exists because of a CVE-2023-28205 security regression for the WebKitGTK package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade webkit2gtk3-jscUpgrade webkit2gtk3-jsc-develUpgrade webkit2gtk3-develUpgrade webkit2gtk3 | May 15, 2023 | May 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-jsc-develUpgrade webkitgtk4-debuginfoUpgrade webkitgtk4-develUpgrade webkitgtk4Upgrade webkitgtk4-jsc | Jun 13, 2023 | May 17, 2023 |
| Centos_linux | — | Upgrade webkit2gtk3-jsc-develUpgrade webkit2gtk3-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade webkit2gtk3Upgrade webkit2gtk3-debuginfoUpgrade webkit2gtk3-develUpgrade webkit2gtk3-jsc-debuginfoUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade webkit2gtk3-jsc | May 15, 2023 | May 9, 2023 |
| Oracle_linux | — | Upgrade webkit2gtk3-jsc-develUpgrade webkit2gtk3-jscUpgrade webkit2gtk3-develUpgrade webkit2gtk3 | May 18, 2023 | May 9, 2023 |
| Redhat_linux | — | Upgrade webkit2gtk3-devel-debuginfoUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade webkit2gtk3-jsc-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade webkit2gtk3-jscUpgrade webkit2gtk3-develUpgrade webkit2gtk3 | May 15, 2023 | May 9, 2023 |
| Rocky_linux | — | Upgrade webkit2gtk3-debuginfoUpgrade webkit2gtk3-develUpgrade webkit2gtk3Upgrade webkit2gtk3-jsc-devel-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade webkit2gtk3-jscUpgrade webkit2gtk3-jsc-develUpgrade webkit2gtk3-debugsource | Mar 5, 2024 | May 17, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub