Lucene search
Ubuntu.comUB:CVE-2022-42852HistoryJan 04, 2023 - 12:00 a.m.
CVE-2022-42852
2023-01-0400:00:00
ubuntu.com
ubuntu.com
24
cve-2022-42852
memory handling
safari
tvos
macos ventura
ios
ipados
watchos
disclosure of process memory
webkit
javascriptcore
vulnerability update
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
0.004 Low
EPSS
Percentile
72.1%
The issue was addressed with improved memory handling. This issue is fixed
in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS
15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously
crafted web content may result in the disclosure of process memory.
Notes
| Author | Note |
|---|---|
| jdstrand | webkit receives limited support. For details, see https://wiki.ubuntu.com/SecurityTeam/FAQ#webkit webkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8 |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | qtwebkit-opensource-src | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | qtwebkit-opensource-src | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | qtwebkit-opensource-src | < any | UNKNOWN |
| ubuntu | 23.10 | noarch | qtwebkit-opensource-src | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | qtwebkit-opensource-src | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | qtwebkit-opensource-src | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | webkit2gtk | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | webkit2gtk | < 2.38.3-0ubuntu0.20.04.1 | UNKNOWN |
| ubuntu | 22.04 | noarch | webkit2gtk | < 2.38.3-0ubuntu0.22.04.1 | UNKNOWN |
| ubuntu | 22.10 | noarch | webkit2gtk | < 2.38.3-0ubuntu0.22.10.1 | UNKNOWN |
Related
redhatcve
redhatcve
CVE-2022-42852
2022-12-30 05:35:02
zdi
zdi
Apple Safari DFG JIT Use-After-Free Information Disclosure Vulnerability
2022-12-21 00:00:00
nvd
nvd
CVE-2022-42852
2022-12-15 19:15:24
prion
prion
Information disclosure
2022-12-15 19:15:00
cve
cve
CVE-2022-42852
2022-12-15 19:15:24
cvelist
cvelist
CVE-2022-42852
2022-12-15 00:00:00
debiancve
debiancve
CVE-2022-42852
2022-12-15 19:15:24
debian
debian
[SECURITY] [DSA 5309-1] wpewebkit security update
2022-12-31 00:43:12
[SECURITY] [DSA 5308-1] webkit2gtk security update
2022-12-31 00:42:12
[SECURITY] [DLA 3274-1] webkit2gtk security update
2023-01-19 10:10:28
nessus
nessus
Fedora 36 : webkit2gtk3 (2022-71121c44a4)
2022-12-31 00:00:00
Debian DSA-5308-1 : webkit2gtk - security update
2022-12-31 00:00:00
Debian DLA-3274-1 : webkit2gtk - LTS security update
2023-01-19 00:00:00
openvas
openvas
Fedora: Security Advisory for webkit2gtk3 (FEDORA-2022-71121c44a4)
2022-12-31 00:00:00
Debian: Security Advisory (DLA-3274-1)
2023-01-20 00:00:00
Ubuntu: Security Advisory (USN-5797-1)
2023-01-10 00:00:00
osv
osv
webkit2gtk - security update
2023-01-19 00:00:00
webkit2gtk vulnerabilities
2023-01-09 16:16:08
webkit2gtk - security update
2022-12-31 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: webkit2gtk3-2.38.3-1.fc36
2022-12-31 01:17:03
[SECURITY] Fedora 37 Update: webkitgtk-2.38.3-2.fc37
2022-12-27 01:13:43
ubuntu
ubuntu
WebKitGTK vulnerabilities
2023-01-09 00:00:00
mageia
mageia
Updated webkit2 packages fix security vulnerability
2022-12-31 01:39:00
apple
apple
About the security content of Safari 16.2
2022-12-13 00:00:00
About the security content of iOS 15.7.2 and iPadOS 15.7.2
2022-12-13 00:00:00
About the security content of watchOS 9.2
2022-12-13 00:00:00
oraclelinux
oraclelinux
webkit2gtk3 security and bug fix update
2023-05-15 00:00:00
webkit2gtk3 security and bug fix update
2023-05-24 00:00:00
almalinux
almalinux
Important: webkit2gtk3 security and bug fix update
2023-05-16 00:00:00
Important: webkit2gtk3 security and bug fix update
2023-05-09 00:00:00
redhat
redhat
(RHSA-2023:2834) Important: webkit2gtk3 security and bug fix update
2023-05-16 05:55:57
(RHSA-2023:2256) Important: webkit2gtk3 security and bug fix update
2023-05-09 05:05:11
gentoo
gentoo
WebKitGTK+: Multiple Vulnerabilities
2023-05-30 00:00:00
amazon
amazon
Important: webkitgtk4
2023-06-07 23:52:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
0.004 Low
EPSS
Percentile
72.1%
Related for UB:CVE-2022-42852