Lucene search

K
cvelistRedhatCVELIST:CVE-2023-2203
HistoryMay 17, 2023 - 12:00 a.m.

CVE-2023-2203

2023-05-1700:00:00
CWE-416
redhat
raw.githubusercontent.com
3
flaw
webkitgtk
input validation
use-after-free
vulnerability
network access
specially crafted
web content
denial of service
arbitrary code execution
security regression
red hat enterprise linux 8.8
red hat enterprise linux 9.2

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.6%

A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free vulnerability. This flaw allows attackers with network access to pass specially crafted web content files, causing a denial of service or arbitrary code execution. This CVE exists because of a CVE-2023-28205 security regression for the WebKitGTK package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.