Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-2203
HistoryMay 17, 2023 - 10:15 p.m.

Input validation

2023-05-1722:15:00
PRIOn knowledge base
www.prio-n.com
11
flaw
webkitgtk
use-after-free
vulnerability
input validation
denial of service
arbitrary code execution
cve-2023-28205
security regression
red hat enterprise linux 8.8
red hat enterprise linux 9.2

8.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.3%

A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free vulnerability. This flaw allows attackers with network access to pass specially crafted web content files, causing a denial of service or arbitrary code execution. This CVE exists because of a CVE-2023-28205 security regression for the WebKitGTK package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.