Bug 2188543 (CVE-2023-2203)

Summary:	CVE-2023-2203 webkitgtk: Regression of CVE-2023-28205 fixes in the Red Hat Enterprise Linux
Product:	[Other] Security Response	Reporter:	TEJ RATHI <trathi>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	high	Docs Contact:
Priority:	high
Version:	unspecified	CC:	mcatanza, security-response-team, tpopela
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	webkit2gtk3 2.38.5-1.el8_8.3, webkit2gtk3 2.38.5-1.el9_2.1	Doc Type:	If docs needed, set a value
Doc Text:	A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free vulnerability. This flaw allows attackers with network access to pass specially crafted web content files, causing a denial of service or arbitrary code execution. This CVE exists because of a CVE-2023-28205 security regression for the WebKitGTK package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-05-17 04:42:42 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2188547, 2188548
Bug Blocks:	2185721
Deadline:	2023-05-09

Description TEJ RATHI 2023-04-21 05:59:20 UTC

The WebKitGTK flaw CVE-2023-28205 (bug 2185724) was addressed in Red Hat Enterprise Linux 8 via erratum RHSA-2023:1919 and in Red Hat Enterprise Linux 9 via erratum RHSA-2023:1918, released on Apr 20, 2023:

https://access.redhat.com/errata/RHSA-2023:1919
https://access.redhat.com/errata/RHSA-2023:1918

However, the fix for this issue was not included in the WebKitGTK updates released as part of Red Hat Enterprise Linux 8.8 GA erratum (RHSA-2023:2834) and Red Hat Enterprise Linux 9.2 GA erratum (RHSA-2023:2256), causing a security regression of previously released fix. A new CVE-ID CVE-2023-2203 was assigned for this security regression.

Note that this issue and CVE-ID is specific to the WebKitGTK packages as shipped with Red Hat Enterprise Linux and is not applicable to any upstream WebKitGTK version or WebKitGTK packages of any other vendor that are not directly based on Red Hat Enterprise Linux packages.

For more information about the original flaw, refer to the CVE page or bug linked above.

Comment 3 errata-xmlrpc 2023-05-09 11:46:19 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2023:2653 https://access.redhat.com/errata/RHSA-2023:2653

Comment 4 errata-xmlrpc 2023-05-16 10:45:46 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2023:3108 https://access.redhat.com/errata/RHSA-2023:3108

Comment 5 Product Security DevOps Team 2023-05-17 04:42:40 UTC

This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2023-2203