Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debianDebianDEBIAN:DLA-3274-1:5F815
HistoryJan 19, 2023 - 10:10 a.m.

[SECURITY] [DLA 3274-1] webkit2gtk security update

2023-01-1910:10:28
lists.debian.org
15

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

33.4%

JSON

Debian LTS Advisory DLA-3274-1 [email protected]
https://www.debian.org/lts/security/ Emilio Pozuelo Monfort
January 19, 2023 https://wiki.debian.org/LTS

Package : webkit2gtk
Version : 2.38.3-1~deb10u1
CVE ID : CVE-2022-42852 CVE-2022-42856 CVE-2022-42867 CVE-2022-46692
CVE-2022-46698 CVE-2022-46699 CVE-2022-46700

The following vulnerabilities have been discovered in the WebKitGTK
web engine:

CVE-2022-42852

hazbinhotel discovered that processing maliciously crafted web
content may result in the disclosure of process memory.

CVE-2022-42856

Clement Lecigne discovered that processing maliciously crafted web
content may lead to arbitrary code execution.

CVE-2022-42867

Maddie Stone discovered that processing maliciously crafted web
content may lead to arbitrary code execution.

CVE-2022-46692

KirtiKumar Anandrao Ramchandani discovered that processing
maliciously crafted web content may bypass Same Origin Policy.

CVE-2022-46698

Dohyun Lee and Ryan Shin discovered that processing maliciously
crafted web content may disclose sensitive user information.

CVE-2022-46699

Samuel Gross discovered that processing maliciously crafted web
content may lead to arbitrary code execution.

CVE-2022-46700

Samuel Gross discovered that processing maliciously crafted web
content may lead to arbitrary code execution.

For Debian 10 buster, these problems have been fixed in version
2.38.3-1~deb10u1.

We recommend that you upgrade your webkit2gtk packages.

For the detailed security status of webkit2gtk please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/webkit2gtk

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian11arm64webkit2gtk-driver-dbgsym< 2.38.3-1~deb11u1webkit2gtk-driver-dbgsym_2.38.3-1~deb11u1_arm64.deb
Debian11armhflibjavascriptcoregtk-4.0-18< 2.38.3-1~deb11u1libjavascriptcoregtk-4.0-18_2.38.3-1~deb11u1_armhf.deb
Debian10amd64libjavascriptcoregtk-4.0-bin< 2.38.3-1~deb10u1libjavascriptcoregtk-4.0-bin_2.38.3-1~deb10u1_amd64.deb
Debian11arm64libwpewebkit-1.0-3< 2.38.3-1~deb11u1libwpewebkit-1.0-3_2.38.3-1~deb11u1_arm64.deb
Debian11armhfgir1.2-javascriptcoregtk-4.0< 2.38.3-1~deb11u1gir1.2-javascriptcoregtk-4.0_2.38.3-1~deb11u1_armhf.deb
Debian11amd64webkit2gtk-driver< 2.38.3-1~deb11u1webkit2gtk-driver_2.38.3-1~deb11u1_amd64.deb
Debian11arm64libwebkit2gtk-4.0-dev< 2.38.3-1~deb11u1libwebkit2gtk-4.0-dev_2.38.3-1~deb11u1_arm64.deb
Debian11mips64elwpewebkit-driver-dbgsym< 2.38.3-1~deb11u1wpewebkit-driver-dbgsym_2.38.3-1~deb11u1_mips64el.deb
Debian11ppc64elwpewebkit-driver< 2.38.3-1~deb11u1wpewebkit-driver_2.38.3-1~deb11u1_ppc64el.deb
Debian10amd64gir1.2-webkit2-4.0< 2.38.3-1~deb10u1gir1.2-webkit2-4.0_2.38.3-1~deb10u1_amd64.deb
Rows per page:
1-10 of 1911

Related

osv 10
openvas 16
ubuntu 1
nessus 30
debian 2
fedora 2
mageia 1
apple 9
kaspersky 1
almalinux 4
prion 7
redhatcve 7
oraclelinux 4
cve 7
ubuntucve 7
malwarebytes 2
debiancve 7
zdt 1
rocky 2
thn 4
redhat 4
cisa_kev 1
packetstorm 1
zdi 1
gentoo 1
attackerkb 1
veracode 1
trellix 4
amazon 1
osv
osv
webkit2gtk - security update
2022-12-31 00:00:00
webkit2gtk - security update
2023-01-19 00:00:00
webkit2gtk vulnerabilities
2023-01-09 16:16:08
openvas
openvas
Debian: Security Advisory (DSA-5309-1)
2023-01-01 00:00:00
Debian: Security Advisory (DSA-5308-1)
2023-01-01 00:00:00
Fedora: Security Advisory for webkitgtk (FEDORA-2022-6bc49e9e54)
2022-12-27 00:00:00
ubuntu
ubuntu
WebKitGTK vulnerabilities
2023-01-09 00:00:00
nessus
nessus
Debian DSA-5308-1 : webkit2gtk - security update
2022-12-31 00:00:00
Debian DLA-3274-1 : webkit2gtk - LTS security update
2023-01-19 00:00:00
Fedora 36 : webkit2gtk3 (2022-71121c44a4)
2022-12-31 00:00:00
debian
debian
[SECURITY] [DSA 5309-1] wpewebkit security update
2022-12-31 00:43:12
[SECURITY] [DSA 5308-1] webkit2gtk security update
2022-12-31 00:42:12
fedora
fedora
[SECURITY] Fedora 36 Update: webkit2gtk3-2.38.3-1.fc36
2022-12-31 01:17:03
[SECURITY] Fedora 37 Update: webkitgtk-2.38.3-2.fc37
2022-12-27 01:13:43
mageia
mageia
Updated webkit2 packages fix security vulnerability
2022-12-31 01:39:00
apple
apple
About the security content of Safari 16.2
2022-12-13 00:00:00
About the security content of iCloud for Windows 14.1
2022-12-13 00:00:00
About the security content of iOS 12.5.7
2023-01-23 00:00:00
kaspersky
kaspersky
KLA20116 Multiple vulnerabilities in Apple iCloud
2022-12-13 00:00:00
almalinux
almalinux
Important: webkit2gtk3 security and bug fix update
2023-05-09 00:00:00
Important: webkit2gtk3 security and bug fix update
2023-05-16 00:00:00
Important: webkit2gtk3 security update
2023-01-04 00:00:00
prion
prion
Design/Logic Flaw
2022-12-15 19:15:00
Memory corruption
2022-12-15 19:15:00
Memory corruption
2022-12-15 19:15:00
redhatcve
redhatcve
CVE-2022-42867
2022-12-30 05:35:22
CVE-2022-46699
2022-12-30 05:36:02
CVE-2022-46692
2022-12-30 05:35:42
oraclelinux
oraclelinux
webkit2gtk3 security and bug fix update
2023-05-15 00:00:00
webkit2gtk3 security and bug fix update
2023-05-24 00:00:00
webkit2gtk3 security update
2023-01-04 00:00:00
cve
cve
CVE-2022-46692
2022-12-15 19:15:00
CVE-2022-46698
2022-12-15 19:15:00
CVE-2022-42867
2022-12-15 19:15:00
ubuntucve
ubuntucve
CVE-2022-46692
2023-01-04 00:00:00
CVE-2022-42856
2023-01-04 00:00:00
CVE-2022-42852
2023-01-04 00:00:00
malwarebytes
malwarebytes
Update now! Apple patches active exploit vulnerability for iPhones
2022-12-16 10:00:00
Own an older iPhone? Check you're on the latest version to avoid this bug
2023-01-24 08:00:00
debiancve
debiancve
CVE-2022-46698
2022-12-15 19:15:00
CVE-2022-42867
2022-12-15 19:15:00
CVE-2022-46699
2022-12-15 19:15:00
zdt
zdt
WebKit CSSCrossfadeValue::crossfadeChanged Use-After-Free Vulnerability
2023-01-16 00:00:00
rocky
rocky
webkit2gtk3 security update
2023-01-04 10:55:33
webkit2gtk3 security update
2023-01-04 08:35:36
thn
thn
Apple Issues Updates for Older Devices to Fix Actively Exploited Vulnerability
2023-01-24 09:21:00
Patch Now: Apple's iOS, iPadOS, macOS, and Safari Under Attack with New Zero-Day Flaw
2023-02-14 04:44:00
New Actively Exploited Zero-Day Vulnerability Discovered in Apple Products
2022-12-14 03:44:00
redhat
redhat
(RHSA-2023:2834) Important: webkit2gtk3 security and bug fix update
2023-05-16 05:55:57
(RHSA-2023:2256) Important: webkit2gtk3 security and bug fix update
2023-05-09 05:05:11
(RHSA-2023:0016) Important: webkit2gtk3 security update
2023-01-04 08:35:36
cisa_kev
cisa_kev
Apple iOS Type Confusion Vulnerability
2022-12-14 00:00:00
packetstorm
packetstorm
WebKit CSSCrossfadeValue::crossfadeChanged Use-After-Free
2023-01-13 00:00:00
zdi
zdi
Apple Safari DFG JIT Use-After-Free Information Disclosure Vulnerability
2022-12-21 00:00:00
gentoo
gentoo
WebKitGTK+: Multiple Vulnerabilities
2023-05-30 00:00:00
attackerkb
attackerkb
CVE-2022-42856
2022-12-15 00:00:00
veracode
veracode
Arbitrary Code Execution
2023-02-03 22:17:07
trellix
trellix
The Bug Report December 2022 Edition
2023-01-04 00:00:00
The Bug Report December 2022 Edition
2023-01-04 00:00:00
The Bug Report – April 2023 Edition
2023-05-03 00:00:00
amazon
amazon
Important: webkitgtk4
2023-06-07 23:52:00

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

33.4%

JSON
Related for DEBIAN:DLA-3274-1:5F815
osv10openvas16ubuntu1nessus30debian2fedora2mageia1apple9kaspersky1almalinux4prion7redhatcve7oraclelinux4cve7ubuntucve7malwarebytes2debiancve7zdt1rocky2thn4redhat4cisa_kev1packetstorm1zdi1gentoo1attackerkb1veracode1trellix4amazon1