Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2019-2024 and is owned by Tenable, Inc. or an Affiliate thereof.SUSE_SU-2019-0497-1.NASL
HistoryFeb 27, 2019 - 12:00 a.m.

SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2019:0497-1)

2019-02-2700:00:00
This script is Copyright (C) 2019-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
14

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.903 High

EPSS

Percentile

98.8%

JSON

This update for webkit2gtk3 to version 2.22.6 fixes the following issues (boo#1124937 boo#1119558) :

Security vulnerabilities fixed :

CVE-2018-4437: Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling. (boo#1119553)

CVE-2018-4438: Processing maliciously crafted web content may lead to arbitrary code execution. A logic issue existed resulting in memory corruption. This was addressed with improved state management.
(boo#1119554)

CVE-2018-4441: Processing maliciously crafted web content may lead to arbitrary code execution. A memory corruption issue was addressed with improved memory handling. (boo#1119555)

CVE-2018-4442: Processing maliciously crafted web content may lead to arbitrary code execution. A memory corruption issue was addressed with improved memory handling. (boo#1119556)

CVE-2018-4443: Processing maliciously crafted web content may lead to arbitrary code execution. A memory corruption issue was addressed with improved memory handling. (boo#1119557)

CVE-2018-4464: Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling. (boo#1119558)

CVE-2019-6212: Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling.

CVE-2019-6215: Processing maliciously crafted web content may lead to arbitrary code execution. A type confusion issue was addressed with improved memory handling.

CVE-2019-6216: Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling.

CVE-2019-6217: Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling.

CVE-2019-6226: Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling.

CVE-2019-6227: Processing maliciously crafted web content may lead to arbitrary code execution. A memory corruption issue was addressed with improved memory handling.

CVE-2019-6229: Processing maliciously crafted web content may lead to universal cross-site scripting. A logic issue was addressed with improved validation.

CVE-2019-6233: Processing maliciously crafted web content may lead to arbitrary code execution. A memory corruption issue was addressed with improved memory handling.

CVE-2019-6234: Processing maliciously crafted web content may lead to arbitrary code execution. A memory corruption issue was addressed with improved memory handling.

Other bug fixes and changes: Make kinetic scrolling slow down smoothly when reaching the ends of pages, instead of abruptly, to better match the GTK+ behaviour.

Fix Web inspector magnifier under Wayland.

Fix garbled rendering of some websites (e.g. YouTube) while scrolling under X11.

Fix several crashes, race conditions, and rendering issues.

For a detailed list of changes, please refer to:
https://webkitgtk.org/security/WSA-2019-0001.html

https://webkitgtk.org/2019/02/09/webkitgtk2.22.6-released.html

https://webkitgtk.org/security/WSA-2018-0009.html

https://webkitgtk.org/2018/12/13/webkitgtk2.22.5-released.html

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from SUSE update advisory SUSE-SU-2019:0497-1.
# The text itself is copyright (C) SUSE.
#

include('compat.inc');

if (description)
{
  script_id(122474);
  script_version("1.6");
  script_set_attribute(attribute:"plugin_modification_date", value:"2024/06/18");

  script_cve_id(
    "CVE-2018-4437",
    "CVE-2018-4438",
    "CVE-2018-4441",
    "CVE-2018-4442",
    "CVE-2018-4443",
    "CVE-2018-4464",
    "CVE-2019-6212",
    "CVE-2019-6215",
    "CVE-2019-6216",
    "CVE-2019-6217",
    "CVE-2019-6226",
    "CVE-2019-6227",
    "CVE-2019-6229",
    "CVE-2019-6233",
    "CVE-2019-6234"
  );

  script_name(english:"SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2019:0497-1)");

  script_set_attribute(attribute:"synopsis", value:
"The remote SUSE host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"This update for webkit2gtk3 to version 2.22.6 fixes the following
issues (boo#1124937 boo#1119558) :

Security vulnerabilities fixed :

CVE-2018-4437: Processing maliciously crafted web content may lead to
arbitrary code execution. Multiple memory corruption issues were
addressed with improved memory handling. (boo#1119553)

CVE-2018-4438: Processing maliciously crafted web content may lead to
arbitrary code execution. A logic issue existed resulting in memory
corruption. This was addressed with improved state management.
(boo#1119554)

CVE-2018-4441: Processing maliciously crafted web content may lead to
arbitrary code execution. A memory corruption issue was addressed with
improved memory handling. (boo#1119555)

CVE-2018-4442: Processing maliciously crafted web content may lead to
arbitrary code execution. A memory corruption issue was addressed with
improved memory handling. (boo#1119556)

CVE-2018-4443: Processing maliciously crafted web content may lead to
arbitrary code execution. A memory corruption issue was addressed with
improved memory handling. (boo#1119557)

CVE-2018-4464: Processing maliciously crafted web content may lead to
arbitrary code execution. Multiple memory corruption issues were
addressed with improved memory handling. (boo#1119558)

CVE-2019-6212: Processing maliciously crafted web content may lead to
arbitrary code execution. Multiple memory corruption issues were
addressed with improved memory handling.

CVE-2019-6215: Processing maliciously crafted web content may lead to
arbitrary code execution. A type confusion issue was addressed with
improved memory handling.

CVE-2019-6216: Processing maliciously crafted web content may lead to
arbitrary code execution. Multiple memory corruption issues were
addressed with improved memory handling.

CVE-2019-6217: Processing maliciously crafted web content may lead to
arbitrary code execution. Multiple memory corruption issues were
addressed with improved memory handling.

CVE-2019-6226: Processing maliciously crafted web content may lead to
arbitrary code execution. Multiple memory corruption issues were
addressed with improved memory handling.

CVE-2019-6227: Processing maliciously crafted web content may lead to
arbitrary code execution. A memory corruption issue was addressed with
improved memory handling.

CVE-2019-6229: Processing maliciously crafted web content may lead to
universal cross-site scripting. A logic issue was addressed with
improved validation.

CVE-2019-6233: Processing maliciously crafted web content may lead to
arbitrary code execution. A memory corruption issue was addressed with
improved memory handling.

CVE-2019-6234: Processing maliciously crafted web content may lead to
arbitrary code execution. A memory corruption issue was addressed with
improved memory handling.

Other bug fixes and changes: Make kinetic scrolling slow down smoothly
when reaching the ends of pages, instead of abruptly, to better match
the GTK+ behaviour.

Fix Web inspector magnifier under Wayland.

Fix garbled rendering of some websites (e.g. YouTube) while scrolling
under X11.

Fix several crashes, race conditions, and rendering issues.

For a detailed list of changes, please refer to:
https://webkitgtk.org/security/WSA-2019-0001.html

https://webkitgtk.org/2019/02/09/webkitgtk2.22.6-released.html

https://webkitgtk.org/security/WSA-2018-0009.html

https://webkitgtk.org/2018/12/13/webkitgtk2.22.5-released.html

Note that Tenable Network Security has extracted the preceding
description block directly from the SUSE security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1119553");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1119554");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1119555");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1119556");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1119557");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1119558");
  script_set_attribute(attribute:"see_also", value:"https://webkitgtk.org/2018/12/13/webkitgtk2.22.5-released.html");
  script_set_attribute(attribute:"see_also", value:"https://webkitgtk.org/2019/02/09/webkitgtk2.22.6-released.html");
  script_set_attribute(attribute:"see_also", value:"https://webkitgtk.org/security/WSA-2018-0009.html");
  script_set_attribute(attribute:"see_also", value:"https://webkitgtk.org/security/WSA-2019-0001.html");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2018-4437/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2018-4438/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2018-4441/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2018-4442/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2018-4443/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2018-4464/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2019-6212/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2019-6215/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2019-6216/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2019-6217/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2019-6226/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2019-6227/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2019-6229/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2019-6233/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2019-6234/");
  # https://www.suse.com/support/update/announcement/2019/suse-su-20190497-1/
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?268ab889");
  script_set_attribute(attribute:"solution", value:
"To install this SUSE Security Update use the SUSE recommended
installation methods like YaST online_update or 'zypper patch'.

Alternatively you can run the command listed for your product :

SUSE Linux Enterprise Module for Open Buildservice Development Tools
15:zypper in -t patch
SUSE-SLE-Module-Development-Tools-OBS-15-2019-497=1

SUSE Linux Enterprise Module for Desktop Applications 15:zypper in -t
patch SUSE-SLE-Module-Desktop-Applications-15-2019-497=1

SUSE Linux Enterprise Module for Basesystem 15:zypper in -t patch
SUSE-SLE-Module-Basesystem-15-2019-497=1");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-6234");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/03/05");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/02/26");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/02/27");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libjavascriptcoregtk-4_0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libjavascriptcoregtk-4_0-18-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libwebkit2gtk-4_0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libwebkit2gtk-4_0-37-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:typelib-1_0-JavaScriptCore");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:typelib-1_0-WebKit2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:typelib-1_0-WebKit2WebExtension");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:webkit-jsc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:webkit-jsc-4-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:webkit2gtk-4_0-injected-bundles");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:webkit2gtk-4_0-injected-bundles-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:webkit2gtk3-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:webkit2gtk3-devel");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:15");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"SuSE Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2019-2024 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release !~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "SUSE");
os_ver = pregmatch(pattern: "^(SLE(S|D)\d+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "SUSE");
os_ver = os_ver[1];
if (! preg(pattern:"^(SLED15|SLES15)$", string:os_ver)) audit(AUDIT_OS_NOT, "SUSE SLED15 / SLES15", "SUSE " + os_ver);

if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if (cpu !~ "^i[3-6]86$" && "x86_64" >!< cpu && "s390x" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "SUSE " + os_ver, cpu);

sp = get_kb_item("Host/SuSE/patchlevel");
if (isnull(sp)) sp = "0";
if (os_ver == "SLES15" && (! preg(pattern:"^(0)$", string:sp))) audit(AUDIT_OS_NOT, "SLES15 SP0", os_ver + " SP" + sp);
if (os_ver == "SLED15" && (! preg(pattern:"^(0)$", string:sp))) audit(AUDIT_OS_NOT, "SLED15 SP0", os_ver + " SP" + sp);


flag = 0;
if (rpm_check(release:"SLES15", sp:"0", reference:"libjavascriptcoregtk-4_0-18-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libjavascriptcoregtk-4_0-18-debuginfo-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libwebkit2gtk-4_0-37-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libwebkit2gtk-4_0-37-debuginfo-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"typelib-1_0-JavaScriptCore-4_0-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"typelib-1_0-WebKit2-4_0-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"typelib-1_0-WebKit2WebExtension-4_0-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"webkit-jsc-4-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"webkit-jsc-4-debuginfo-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"webkit2gtk-4_0-injected-bundles-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"webkit2gtk-4_0-injected-bundles-debuginfo-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"webkit2gtk3-debugsource-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"webkit2gtk3-devel-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libjavascriptcoregtk-4_0-18-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libjavascriptcoregtk-4_0-18-debuginfo-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libwebkit2gtk-4_0-37-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libwebkit2gtk-4_0-37-debuginfo-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"typelib-1_0-JavaScriptCore-4_0-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"typelib-1_0-WebKit2-4_0-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"typelib-1_0-WebKit2WebExtension-4_0-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"webkit-jsc-4-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"webkit-jsc-4-debuginfo-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"webkit2gtk-4_0-injected-bundles-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"webkit2gtk-4_0-injected-bundles-debuginfo-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"webkit2gtk3-debugsource-2.22.6-3.18.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"webkit2gtk3-devel-2.22.6-3.18.2")) flag++;


if (flag)
{
  set_kb_item(name:'www/0/XSS', value:TRUE);
  if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
  else security_warning(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "webkit2gtk3");
}
VendorProductVersionCPE
novellsuse_linuxlibjavascriptcoregtk-4_0p-cpe:/a:novell:suse_linux:libjavascriptcoregtk-4_0
novellsuse_linuxwebkit2gtk-4_0-injected-bundles-debuginfop-cpe:/a:novell:suse_linux:webkit2gtk-4_0-injected-bundles-debuginfo
novellsuse_linuxwebkit2gtk3-develp-cpe:/a:novell:suse_linux:webkit2gtk3-devel
novellsuse_linuxtypelib-1_0-javascriptcorep-cpe:/a:novell:suse_linux:typelib-1_0-javascriptcore
novellsuse_linuxwebkit2gtk3-debugsourcep-cpe:/a:novell:suse_linux:webkit2gtk3-debugsource
novellsuse_linuxlibwebkit2gtk-4_0p-cpe:/a:novell:suse_linux:libwebkit2gtk-4_0
novellsuse_linuxlibwebkit2gtk-4_0-37-debuginfop-cpe:/a:novell:suse_linux:libwebkit2gtk-4_0-37-debuginfo
novellsuse_linuxwebkit2gtk-4_0-injected-bundlesp-cpe:/a:novell:suse_linux:webkit2gtk-4_0-injected-bundles
novellsuse_linux15cpe:/o:novell:suse_linux:15
novellsuse_linuxwebkit-jscp-cpe:/a:novell:suse_linux:webkit-jsc
Rows per page:
1-10 of 141

References

Related

suse 3
openvas 17
nessus 22
gentoo 1
freebsd 1
apple 21
kaspersky 3
ubuntu 2
archlinux 2
fedora 4
zdi 4
prion 15
cve 14
nvd 15
googleprojectzero 1
alpinelinux 6
cvelist 15
ubuntucve 14
osv 7
packetstorm 5
zdt 6
checkpoint_advisories 5
debiancve 15
exploitpack 1
suse
suse
Security update for webkit2gtk3 (moderate)
2019-03-08 00:00:00
Security update for webkit2gtk3 (important)
2019-03-08 00:00:00
Security update for webkit2gtk3 (important)
2019-01-31 00:00:00
openvas
openvas
openSUSE: Security Advisory for webkit2gtk3 (openSUSE-SU-2019:0308-1)
2019-03-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:0497-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for webkit2gtk3 (openSUSE-SU-2019:0309-1)
2019-03-09 00:00:00
nessus
nessus
openSUSE Security Update : webkit2gtk3 (openSUSE-2019-308)
2019-03-11 00:00:00
openSUSE Security Update : webkit2gtk3 (openSUSE-2019-309)
2019-03-11 00:00:00
GLSA-201903-12 : WebkitGTK+: Multiple vulnerabilities
2019-03-14 00:00:00
gentoo
gentoo
WebkitGTK+: Multiple vulnerabilities
2019-03-14 00:00:00
freebsd
freebsd
webkit-gtk -- Multiple vulnerabilities
2019-02-08 00:00:00
apple
apple
About the security content of Safari 12.0.3
2019-01-22 00:00:00
About the security content of Safari 12.0.3 - Apple Support
2019-09-11 09:22:04
About the security content of iCloud for Windows 7.10 - Apple Support
2019-09-11 09:12:20
kaspersky
kaspersky
KLA11409 Multiple vulnerabilities in Apple iCloud
2019-02-11 00:00:00
KLA11408 Multiple vulnerabilities in Apple iTunes
2019-01-24 00:00:00
KLA11384 Multiple vulnerabilities in Apple iTunes
2018-12-12 00:00:00
ubuntu
ubuntu
WebKitGTK+ vulnerabilities
2019-02-13 00:00:00
WebKitGTK+ vulnerabilities
2019-01-10 00:00:00
archlinux
archlinux
[ASA-201902-17] webkit2gtk: arbitrary code execution
2019-02-15 00:00:00
[ASA-201812-10] webkit2gtk: arbitrary code execution
2018-12-14 00:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: webkit2gtk3-2.22.6-1.fc29
2019-02-14 01:59:01
[SECURITY] Fedora 28 Update: webkit2gtk3-2.22.6-1.fc28
2019-02-21 01:39:42
[SECURITY] Fedora 29 Update: webkit2gtk3-2.22.5-1.fc29
2018-12-19 02:29:42
zdi
zdi
(Pwn2Own) Apple Safari Global RegExp JIT Type Confusion Remote Code Execution Vulnerability
2019-01-25 00:00:00
Apple Safari CSSFontFace Use-After-Free Remote Code Execution Vulnerability
2019-01-25 00:00:00
Apple Safari RenderBlockFlow Use-After-Free Remote Code Execution Vulnerability
2019-01-25 00:00:00
prion
prion
Memory corruption
2019-03-05 16:29:00
Memory corruption
2019-03-05 16:29:00
Type confusion
2019-03-05 16:29:00
cve
cve
CVE-2019-6226
2019-03-05 16:29:02
CVE-2019-6229
2019-03-05 16:29:02
CVE-2019-6216
2019-03-05 16:29:01
nvd
nvd
CVE-2019-6234
2019-03-05 16:29:03
CVE-2019-6226
2019-03-05 16:29:02
CVE-2019-6229
2019-03-05 16:29:02
googleprojectzero
googleprojectzero
JSC Exploits
2019-08-29 00:00:00
alpinelinux
alpinelinux
CVE-2019-6229
2019-03-05 16:29:02
CVE-2019-6217
2019-03-05 16:29:01
CVE-2019-6227
2019-03-05 16:29:02
cvelist
cvelist
CVE-2019-6234
2019-03-05 16:00:00
CVE-2019-6229
2019-03-05 16:00:00
CVE-2019-6217
2019-03-05 16:00:00
ubuntucve
ubuntucve
CVE-2019-6217
2019-03-05 00:00:00
CVE-2019-6216
2019-03-05 00:00:00
CVE-2019-6234
2019-03-05 00:00:00
osv
osv
CVE-2019-6234
2019-03-05 16:29:03
CVE-2018-4442
2019-04-03 18:29:16
CVE-2018-4464
2019-04-03 18:29:17
packetstorm
packetstorm
WebKit JSC reifyStaticProperty Attribute Flag Issue
2019-02-21 00:00:00
WebKit JSC AbstractValue::set Use-After-Free
2018-12-27 00:00:00
WebKit JIT Proxy Object Issue
2018-12-12 00:00:00
zdt
zdt
WebKit JSC reifyStaticProperty Attribute Flag Issue Exploit
2019-02-21 00:00:00
WebKit JSC AbstractValue::set Use-After-Free Exploit
2018-12-29 00:00:00
WebKit JSC JIT - GetIndexedPropertyStorage Use-After-Free Exploit
2019-01-17 00:00:00
checkpoint_advisories
checkpoint_advisories
Apple Safari Type Confusion (CVE-2019-6215)
2021-04-29 00:00:00
Apple WebKit AbstractValue Set Use After Free (CVE-2018-4443)
2022-11-17 00:00:00
Apple WebKit Use After Free (CVE-2018-4442)
2020-03-16 00:00:00
debiancve
debiancve
CVE-2019-6233
2019-03-05 16:29:02
CVE-2019-6226
2019-03-05 16:29:02
CVE-2019-6227
2019-03-05 16:29:02
exploitpack
exploitpack
Sony Playstation 4 (PS4) 6.20 - WebKit Code Execution (PoC)
2019-03-08 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.903 High

EPSS

Percentile

98.8%

JSON
Related for SUSE_SU-2019-0497-1.NASL
suse3openvas17nessus22gentoo1freebsd1apple21kaspersky3ubuntu2archlinux2fedora4zdi4prion15cve14nvd15googleprojectzero1alpinelinux6cvelist15ubuntucve14osv7packetstorm5zdt6checkpoint_advisories5debiancve15exploitpack1