Bug 2271456 (CVE-2023-42852)
| Summary: | CVE-2023-42852 webkitgtk: Processing web content may lead to arbitrary code execution | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | Marco Benatto <mbenatto> |
| Component: | vulnerability | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | unspecified | Keywords: | Security |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: |
A vulnerability was found in WebKitGTK and WPE WebKit, which allows remote attacker to perform arbitrary code execution when processing web content. This vulnerability caused by insufficient checks, which could be exploited by attackers to execute malicious code on affected systems.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2271457 | ||
| Bug Blocks: | 2271436 | ||
|
Description
Marco Benatto
2024-03-25 17:27:40 UTC
Created webkitgtk tracking bugs for this issue: Affects: fedora-all [bug 2271457] This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2024:2126 https://access.redhat.com/errata/RHSA-2024:2126 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2024:2982 https://access.redhat.com/errata/RHSA-2024:2982 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Extended Update Support Via RHSA-2024:8492 https://access.redhat.com/errata/RHSA-2024:8492 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Via RHSA-2024:8496 https://access.redhat.com/errata/RHSA-2024:8496 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.8 Extended Update Support Via RHSA-2024:9646 https://access.redhat.com/errata/RHSA-2024:9646 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions Red Hat Enterprise Linux 8.6 Telecommunications Update Service Via RHSA-2024:9653 https://access.redhat.com/errata/RHSA-2024:9653 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.2 Advanced Update Support Via RHSA-2024:9680 https://access.redhat.com/errata/RHSA-2024:9680 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.4 Telecommunications Update Service Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions Via RHSA-2024:9679 https://access.redhat.com/errata/RHSA-2024:9679 This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Extended Lifecycle Support Via RHSA-2025:10364 https://access.redhat.com/errata/RHSA-2025:10364 |