Lucene search
Ubuntu.comUB:CVE-2024-40779HistorySep 05, 2024 - 12:00 a.m.
CVE-2024-40779
2024-09-0500:00:00
ubuntu.com
ubuntu.com
2
limited support
webkit
jsc engine
webkit2gtk
focal
wpewebkit
backport
archive items
webkitgtk
qtwebkit-source
qtwebkit-opensource-src
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
6.8
Confidence
Low
Notes
| Author | Note |
|---|---|
| jdstrand | webkit receives limited support. For details, see https://wiki.ubuntu.com/SecurityTeam/FAQ#webkit webkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8 |
| mdeslaur | It is no longer possible to build new webkit2gtk versions on focal and earlier. Marking as ignored. wpewebkit isn’t used by anything of importance in the archive, except for cog, an example container for wpewebkit. There is no point in attempting to backport newer wpewebkit versions to the archive. As such, marking as ignored. It is not feasible to fix webkitgtk, qtwebkit-source, and qtwebkit-opensource-src. Marking them as ignored. |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 22.04 | noarch | webkit2gtk | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | webkit2gtk | < any | UNKNOWN |
Related
debiancve
debiancve
CVE-2024-40779
2024-07-29 23:15:11
vulnrichment
vulnrichment
CVE-2024-40779
2024-07-29 22:16:33
redhatcve
redhatcve
CVE-2024-40779
2024-07-31 16:06:51
osv
osv
CVE-2024-40779
2024-07-29 23:15:11
webkit2gtk vulnerabilities
2024-09-09 12:01:37
webkit2gtk - security update
2024-09-02 00:00:00
cve
cve
CVE-2024-40779
2024-07-29 23:15:11
nvd
nvd
CVE-2024-40779
2024-07-29 23:15:11
cvelist
cvelist
CVE-2024-40779
2024-07-29 22:16:33
nessus
nessus
SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2024:2905-1)
2024-08-15 00:00:00
SUSE SLES15 Security Update : webkit2gtk3 (SUSE-SU-2024:2949-1)
2024-08-17 00:00:00
Amazon Linux 2 : webkitgtk4 (ALAS-2024-2623)
2024-08-21 00:00:00
amazon
amazon
Important: webkitgtk4
2024-08-14 19:06:00
openvas
openvas
openSUSE: Security Advisory for webkit2gtk3 (SUSE-SU-2024:2905-1)
2024-08-20 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:2949-1)
2024-08-19 00:00:00
Fedora: Security Advisory (FEDORA-2024-6b8845e3f0)
2024-09-10 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: webkitgtk-2.44.3-2.fc39
2024-08-22 01:09:47
[SECURITY] Fedora 40 Update: webkitgtk-2.44.3-2.fc40
2024-08-27 17:08:53
[SECURITY] Fedora 40 Update: webkit2gtk4.0-2.44.3-2.fc40
2024-08-27 17:08:55
apple
apple
About the security content of Safari 17.6
2024-07-29 00:00:00
About the security content of tvOS 17.6
2024-07-29 00:00:00
About the security content of visionOS 1.3
2024-07-29 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
6.8
Confidence
Low
Related for UB:CVE-2024-40779