Lucene search
AlmaLinuxALSA-2023:7715HistoryDec 11, 2023 - 12:00 a.m.
Important: webkit2gtk3 security update
2023-12-1100:00:00
errata.almalinux.org
17
webkitgtk portable web rendering engine arbitrary remote code execution cve-2023-42917 unix security fix cvss score acknowledgments references section
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8
Confidence
Low
EPSS
0.002
Percentile
54.8%
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
- webkitgtk: Arbitrary Remote Code Execution (CVE-2023-42917)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 9 | i686 | webkit2gtk3-jsc | < 2.40.5-1.el9_3.1 | webkit2gtk3-jsc-2.40.5-1.el9_3.1.i686.rpm |
| almalinux | 9 | i686 | webkit2gtk3-jsc-devel | < 2.40.5-1.el9_3.1 | webkit2gtk3-jsc-devel-2.40.5-1.el9_3.1.i686.rpm |
| almalinux | 9 | i686 | webkit2gtk3 | < 2.40.5-1.el9_3.1 | webkit2gtk3-2.40.5-1.el9_3.1.i686.rpm |
| almalinux | 9 | i686 | webkit2gtk3-devel | < 2.40.5-1.el9_3.1 | webkit2gtk3-devel-2.40.5-1.el9_3.1.i686.rpm |
| almalinux | 9 | aarch64 | webkit2gtk3-devel | < 2.40.5-1.el9_3.1 | webkit2gtk3-devel-2.40.5-1.el9_3.1.aarch64.rpm |
| almalinux | 9 | aarch64 | webkit2gtk3-jsc | < 2.40.5-1.el9_3.1 | webkit2gtk3-jsc-2.40.5-1.el9_3.1.aarch64.rpm |
| almalinux | 9 | aarch64 | webkit2gtk3-jsc-devel | < 2.40.5-1.el9_3.1 | webkit2gtk3-jsc-devel-2.40.5-1.el9_3.1.aarch64.rpm |
| almalinux | 9 | aarch64 | webkit2gtk3 | < 2.40.5-1.el9_3.1 | webkit2gtk3-2.40.5-1.el9_3.1.aarch64.rpm |
| almalinux | 9 | x86_64 | webkit2gtk3-jsc | < 2.40.5-1.el9_3.1 | webkit2gtk3-jsc-2.40.5-1.el9_3.1.x86_64.rpm |
| almalinux | 9 | x86_64 | webkit2gtk3-devel | < 2.40.5-1.el9_3.1 | webkit2gtk3-devel-2.40.5-1.el9_3.1.x86_64.rpm |
Related
osv
osv
Important: webkit2gtk3 security update
2023-12-11 00:00:00
Important: webkit2gtk3 security update
2023-12-11 00:00:00
CGA-55r9-jv8g-jx4g
2024-06-06 12:23:58
oraclelinux
oraclelinux
webkit2gtk3 security update
2023-12-13 00:00:00
webkit2gtk3 security update
2023-12-13 00:00:00
nessus
nessus
RHEL 8 : webkit2gtk3 (RHSA-2023:7716)
2023-12-11 00:00:00
AlmaLinux 9 : webkit2gtk3 (ALSA-2023:7715)
2023-12-12 00:00:00
Oracle Linux 8 : webkit2gtk3 (ELSA-2023-7716)
2023-12-15 00:00:00
debiancve
debiancve
CVE-2023-42917
2023-11-30 23:15:07
redhat
redhat
(RHSA-2023:7716) Important: webkit2gtk3 security update
2023-12-11 09:28:55
(RHSA-2023:7715) Important: webkit2gtk3 security update
2023-12-11 09:27:25
attackerkb
attackerkb
CVE-2023-42917
2023-11-30 00:00:00
nvd
nvd
CVE-2023-42917
2023-11-30 23:15:07
prion
prion
Memory corruption
2023-11-30 23:15:00
almalinux
almalinux
Important: webkit2gtk3 security update
2023-12-11 00:00:00
cvelist
cvelist
CVE-2023-42917
2023-11-30 22:18:50
redhatcve
redhatcve
CVE-2023-42917
2023-12-06 01:32:18
rocky
rocky
webkit2gtk3 security update
2024-01-09 04:07:10
cisa_kev
cisa_kev
Apple Multiple Products WebKit Memory Corruption Vulnerability
2023-12-04 00:00:00
ubuntucve
ubuntucve
CVE-2023-42917
2023-11-30 00:00:00
wolfi
wolfi
CVE-2023-42917 vulnerabilities
2024-10-01 09:27:37
cve
cve
CVE-2023-42917
2023-11-30 23:15:07
openvas
openvas
Apple Mac OS X Security Update (HT214032)
2023-12-01 00:00:00
Ubuntu: Security Advisory (USN-6545-1)
2023-12-12 00:00:00
Debian: Security Advisory (DSA-5575-1)
2023-12-12 00:00:00
ubuntu
ubuntu
WebKitGTK vulnerabilities
2023-12-11 00:00:00
hivepro
hivepro
Apple’s Timely Response to Actively Exploited Zero-Days
2023-12-14 08:27:54
debian
debian
[SECURITY] [DSA 5575-1] webkit2gtk security update
2023-12-11 22:15:28
apple
apple
About the security content of iOS 17.1.2 and iPadOS 17.1.2
2023-11-30 00:00:00
About the security content of macOS Sonoma 14.1.2
2023-11-30 00:00:00
About the security content of Safari 17.1.2
2023-11-30 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: webkitgtk-2.42.3-1.fc38
2023-12-09 02:47:43
[SECURITY] Fedora 39 Update: webkitgtk-2.42.3-1.fc39
2023-12-09 02:44:16
talosblog
talosblog
Cybersecurity considerations to have when shopping for holiday gifts
2023-12-07 19:00:40
Why is the cost of cyber insurance rising?
2024-01-25 19:00:35
thn
thn
amazon
amazon
Important: webkitgtk4
2024-01-19 01:51:00
gentoo
gentoo
WebKitGTK+: Multiple Vulnerabilities
2024-01-05 00:00:00
avleonov
avleonov
mageia
mageia
Updated webkit2 packages fix security vulnerabilities
2024-04-26 09:47:12
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8
Confidence
Low
EPSS
0.002
Percentile
54.8%
Related for ALSA-2023:7715