Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.SUSE_SU-2023-4824-1.NASL
HistoryDec 15, 2023 - 12:00 a.m.

SUSE SLES15 Security Update : webkit2gtk3 (SUSE-SU-2023:4824-1)

2023-12-1500:00:00
This script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
5
suse sles15
security update
webkit2gtk3
cve-2023-42916
cve-2023-42917
memory corruption vulnerability
out-of-bounds read
nessus
vulnerability
exploit

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.4%

JSON

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4824-1 advisory.

  • An out-of-bounds read was addressed with improved input validation. (CVE-2023-42916)

  • A memory corruption vulnerability was addressed with improved locking. (CVE-2023-42917)

Note that Nessus has not tested for these issues but has instead relied only on the application’s self-reported version number.

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The package checks in this plugin were extracted from
# SUSE update advisory SUSE-SU-2023:4824-1. The text itself
# is copyright (C) SUSE.
##

include('compat.inc');

if (description)
{
  script_id(187015);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2024/02/28");

  script_cve_id("CVE-2023-42916", "CVE-2023-42917");
  script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2023/12/25");
  script_xref(name:"SuSE", value:"SUSE-SU-2023:4824-1");

  script_name(english:"SUSE SLES15 Security Update : webkit2gtk3 (SUSE-SU-2023:4824-1)");

  script_set_attribute(attribute:"synopsis", value:
"The remote SUSE host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as
referenced in the SUSE-SU-2023:4824-1 advisory.

  - An out-of-bounds read was addressed with improved input validation. (CVE-2023-42916)

  - A memory corruption vulnerability was addressed with improved locking. (CVE-2023-42917)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1217844");
  # https://lists.suse.com/pipermail/sle-security-updates/2023-December/017366.html
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?bb9c75de");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2023-42916");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2023-42917");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:F/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:F/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2023-42917");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2023/11/30");
  script_set_attribute(attribute:"patch_publication_date", value:"2023/12/14");
  script_set_attribute(attribute:"plugin_publication_date", value:"2023/12/15");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libjavascriptcoregtk-4_0-18");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libwebkit2gtk-4_0-37");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libwebkit2gtk3-lang");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:typelib-1_0-JavaScriptCore-4_0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:typelib-1_0-WebKit2-4_0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:typelib-1_0-WebKit2WebExtension-4_0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:webkit2gtk-4_0-injected-bundles");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:webkit2gtk3-devel");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:15");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"SuSE Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");

  exit(0);
}


include('rpm.inc');

if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_release = get_kb_item("Host/SuSE/release");
if (isnull(os_release) || os_release !~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "SUSE");
var os_ver = pregmatch(pattern: "^(SLE(S|D)(?:_SAP)?\d+)", string:os_release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, 'SUSE');
os_ver = os_ver[1];
if (! preg(pattern:"^(SLES15|SLES_SAP15)$", string:os_ver)) audit(AUDIT_OS_NOT, 'SUSE SLES15 / SLES_SAP15', 'SUSE (' + os_ver + ')');

if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 's390' >!< cpu && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'SUSE (' + os_ver + ')', cpu);

var service_pack = get_kb_item("Host/SuSE/patchlevel");
if (isnull(service_pack)) service_pack = "0";
if (os_ver == "SLES15" && (! preg(pattern:"^(2|3)$", string:service_pack))) audit(AUDIT_OS_NOT, "SLES15 SP2/3", os_ver + " SP" + service_pack);
if (os_ver == "SLES_SAP15" && (! preg(pattern:"^(2|3)$", string:service_pack))) audit(AUDIT_OS_NOT, "SLES_SAP15 SP2/3", os_ver + " SP" + service_pack);

var pkgs = [
    {'reference':'libjavascriptcoregtk-4_0-18-2.42.3-150200.94.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES_SAP15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLES_SAP-release-15.2']},
    {'reference':'libwebkit2gtk-4_0-37-2.42.3-150200.94.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES_SAP15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLES_SAP-release-15.2']},
    {'reference':'libwebkit2gtk3-lang-2.42.3-150200.94.1', 'sp':'2', 'release':'SLES_SAP15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLES_SAP-release-15.2']},
    {'reference':'typelib-1_0-JavaScriptCore-4_0-2.42.3-150200.94.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES_SAP15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLES_SAP-release-15.2']},
    {'reference':'typelib-1_0-WebKit2-4_0-2.42.3-150200.94.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES_SAP15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLES_SAP-release-15.2']},
    {'reference':'typelib-1_0-WebKit2WebExtension-4_0-2.42.3-150200.94.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES_SAP15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLES_SAP-release-15.2']},
    {'reference':'webkit2gtk-4_0-injected-bundles-2.42.3-150200.94.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES_SAP15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLES_SAP-release-15.2']},
    {'reference':'webkit2gtk3-devel-2.42.3-150200.94.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES_SAP15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLES_SAP-release-15.2']},
    {'reference':'libjavascriptcoregtk-4_0-18-2.42.3-150200.94.1', 'sp':'3', 'cpu':'x86_64', 'release':'SLES_SAP15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLES_SAP-release-15.3']},
    {'reference':'libwebkit2gtk-4_0-37-2.42.3-150200.94.1', 'sp':'3', 'cpu':'x86_64', 'release':'SLES_SAP15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLES_SAP-release-15.3']},
    {'reference':'libwebkit2gtk3-lang-2.42.3-150200.94.1', 'sp':'3', 'release':'SLES_SAP15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLES_SAP-release-15.3']},
    {'reference':'typelib-1_0-JavaScriptCore-4_0-2.42.3-150200.94.1', 'sp':'3', 'cpu':'x86_64', 'release':'SLES_SAP15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLES_SAP-release-15.3']},
    {'reference':'typelib-1_0-WebKit2-4_0-2.42.3-150200.94.1', 'sp':'3', 'cpu':'x86_64', 'release':'SLES_SAP15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLES_SAP-release-15.3']},
    {'reference':'typelib-1_0-WebKit2WebExtension-4_0-2.42.3-150200.94.1', 'sp':'3', 'cpu':'x86_64', 'release':'SLES_SAP15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLES_SAP-release-15.3']},
    {'reference':'webkit2gtk-4_0-injected-bundles-2.42.3-150200.94.1', 'sp':'3', 'cpu':'x86_64', 'release':'SLES_SAP15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLES_SAP-release-15.3']},
    {'reference':'webkit2gtk3-devel-2.42.3-150200.94.1', 'sp':'3', 'cpu':'x86_64', 'release':'SLES_SAP15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLES_SAP-release-15.3']},
    {'reference':'libjavascriptcoregtk-4_0-18-2.42.3-150200.94.1', 'sp':'3', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-3']},
    {'reference':'libjavascriptcoregtk-4_0-18-2.42.3-150200.94.1', 'sp':'3', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-3']},
    {'reference':'libwebkit2gtk-4_0-37-2.42.3-150200.94.1', 'sp':'3', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-3']},
    {'reference':'libwebkit2gtk-4_0-37-2.42.3-150200.94.1', 'sp':'3', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-3']},
    {'reference':'libwebkit2gtk3-lang-2.42.3-150200.94.1', 'sp':'3', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-3']},
    {'reference':'typelib-1_0-JavaScriptCore-4_0-2.42.3-150200.94.1', 'sp':'3', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-3']},
    {'reference':'typelib-1_0-JavaScriptCore-4_0-2.42.3-150200.94.1', 'sp':'3', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-3']},
    {'reference':'typelib-1_0-WebKit2-4_0-2.42.3-150200.94.1', 'sp':'3', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-3']},
    {'reference':'typelib-1_0-WebKit2-4_0-2.42.3-150200.94.1', 'sp':'3', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-3']},
    {'reference':'typelib-1_0-WebKit2WebExtension-4_0-2.42.3-150200.94.1', 'sp':'3', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-3']},
    {'reference':'typelib-1_0-WebKit2WebExtension-4_0-2.42.3-150200.94.1', 'sp':'3', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-3']},
    {'reference':'webkit2gtk-4_0-injected-bundles-2.42.3-150200.94.1', 'sp':'3', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-3']},
    {'reference':'webkit2gtk-4_0-injected-bundles-2.42.3-150200.94.1', 'sp':'3', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-3']},
    {'reference':'webkit2gtk3-devel-2.42.3-150200.94.1', 'sp':'3', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-3']},
    {'reference':'webkit2gtk3-devel-2.42.3-150200.94.1', 'sp':'3', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-ESPOS-release-3']},
    {'reference':'libjavascriptcoregtk-4_0-18-2.42.3-150200.94.1', 'sp':'2', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
    {'reference':'libjavascriptcoregtk-4_0-18-2.42.3-150200.94.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
    {'reference':'libwebkit2gtk-4_0-37-2.42.3-150200.94.1', 'sp':'2', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
    {'reference':'libwebkit2gtk-4_0-37-2.42.3-150200.94.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
    {'reference':'libwebkit2gtk3-lang-2.42.3-150200.94.1', 'sp':'2', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2', 'sles-ltss-release-15.2']},
    {'reference':'typelib-1_0-JavaScriptCore-4_0-2.42.3-150200.94.1', 'sp':'2', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
    {'reference':'typelib-1_0-JavaScriptCore-4_0-2.42.3-150200.94.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
    {'reference':'typelib-1_0-WebKit2-4_0-2.42.3-150200.94.1', 'sp':'2', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
    {'reference':'typelib-1_0-WebKit2-4_0-2.42.3-150200.94.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
    {'reference':'typelib-1_0-WebKit2WebExtension-4_0-2.42.3-150200.94.1', 'sp':'2', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
    {'reference':'typelib-1_0-WebKit2WebExtension-4_0-2.42.3-150200.94.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
    {'reference':'webkit2gtk-4_0-injected-bundles-2.42.3-150200.94.1', 'sp':'2', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
    {'reference':'webkit2gtk-4_0-injected-bundles-2.42.3-150200.94.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
    {'reference':'webkit2gtk3-devel-2.42.3-150200.94.1', 'sp':'2', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
    {'reference':'webkit2gtk3-devel-2.42.3-150200.94.1', 'sp':'2', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.2']},
    {'reference':'libjavascriptcoregtk-4_0-18-2.42.3-150200.94.1', 'sp':'3', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.3']},
    {'reference':'libjavascriptcoregtk-4_0-18-2.42.3-150200.94.1', 'sp':'3', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.3']},
    {'reference':'libwebkit2gtk-4_0-37-2.42.3-150200.94.1', 'sp':'3', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.3']},
    {'reference':'libwebkit2gtk-4_0-37-2.42.3-150200.94.1', 'sp':'3', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.3']},
    {'reference':'libwebkit2gtk3-lang-2.42.3-150200.94.1', 'sp':'3', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.3', 'sles-ltss-release-15.3']},
    {'reference':'typelib-1_0-JavaScriptCore-4_0-2.42.3-150200.94.1', 'sp':'3', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.3']},
    {'reference':'typelib-1_0-JavaScriptCore-4_0-2.42.3-150200.94.1', 'sp':'3', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.3']},
    {'reference':'typelib-1_0-WebKit2-4_0-2.42.3-150200.94.1', 'sp':'3', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.3']},
    {'reference':'typelib-1_0-WebKit2-4_0-2.42.3-150200.94.1', 'sp':'3', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.3']},
    {'reference':'typelib-1_0-WebKit2WebExtension-4_0-2.42.3-150200.94.1', 'sp':'3', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.3']},
    {'reference':'typelib-1_0-WebKit2WebExtension-4_0-2.42.3-150200.94.1', 'sp':'3', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.3']},
    {'reference':'webkit2gtk-4_0-injected-bundles-2.42.3-150200.94.1', 'sp':'3', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.3']},
    {'reference':'webkit2gtk-4_0-injected-bundles-2.42.3-150200.94.1', 'sp':'3', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.3']},
    {'reference':'webkit2gtk3-devel-2.42.3-150200.94.1', 'sp':'3', 'cpu':'aarch64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.3']},
    {'reference':'webkit2gtk3-devel-2.42.3-150200.94.1', 'sp':'3', 'cpu':'x86_64', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['SLE_HPC-LTSS-release-15.3']},
    {'reference':'libjavascriptcoregtk-4_0-18-2.42.3-150200.94.1', 'sp':'2', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['sles-ltss-release-15.2']},
    {'reference':'libwebkit2gtk-4_0-37-2.42.3-150200.94.1', 'sp':'2', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['sles-ltss-release-15.2']},
    {'reference':'typelib-1_0-JavaScriptCore-4_0-2.42.3-150200.94.1', 'sp':'2', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['sles-ltss-release-15.2']},
    {'reference':'typelib-1_0-WebKit2-4_0-2.42.3-150200.94.1', 'sp':'2', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['sles-ltss-release-15.2']},
    {'reference':'typelib-1_0-WebKit2WebExtension-4_0-2.42.3-150200.94.1', 'sp':'2', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['sles-ltss-release-15.2']},
    {'reference':'webkit2gtk-4_0-injected-bundles-2.42.3-150200.94.1', 'sp':'2', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['sles-ltss-release-15.2']},
    {'reference':'webkit2gtk3-devel-2.42.3-150200.94.1', 'sp':'2', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['sles-ltss-release-15.2']},
    {'reference':'libjavascriptcoregtk-4_0-18-2.42.3-150200.94.1', 'sp':'3', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['sles-ltss-release-15.3']},
    {'reference':'libwebkit2gtk-4_0-37-2.42.3-150200.94.1', 'sp':'3', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['sles-ltss-release-15.3']},
    {'reference':'typelib-1_0-JavaScriptCore-4_0-2.42.3-150200.94.1', 'sp':'3', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['sles-ltss-release-15.3']},
    {'reference':'typelib-1_0-WebKit2-4_0-2.42.3-150200.94.1', 'sp':'3', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['sles-ltss-release-15.3']},
    {'reference':'typelib-1_0-WebKit2WebExtension-4_0-2.42.3-150200.94.1', 'sp':'3', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['sles-ltss-release-15.3']},
    {'reference':'webkit2gtk-4_0-injected-bundles-2.42.3-150200.94.1', 'sp':'3', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['sles-ltss-release-15.3']},
    {'reference':'webkit2gtk3-devel-2.42.3-150200.94.1', 'sp':'3', 'release':'SLES15', 'rpm_spec_vers_cmp':TRUE, 'exists_check':['sles-ltss-release-15.3']}
];

var ltss_caveat_required = FALSE;
var flag = 0;
foreach var package_array ( pkgs ) {
  var reference = NULL;
  var _release = NULL;
  var sp = NULL;
  var _cpu = NULL;
  var exists_check = NULL;
  var rpm_spec_vers_cmp = NULL;
  if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
  if (!empty_or_null(package_array['release'])) _release = package_array['release'];
  if (!empty_or_null(package_array['sp'])) sp = package_array['sp'];
  if (!empty_or_null(package_array['cpu'])) _cpu = package_array['cpu'];
  if (!empty_or_null(package_array['exists_check'])) exists_check = package_array['exists_check'];
  if (!empty_or_null(package_array['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = package_array['rpm_spec_vers_cmp'];
  if (reference && _release) {
    if (exists_check) {
      var check_flag = 0;
      foreach var check (exists_check) {
        if (!rpm_exists(release:_release, rpm:check)) continue;
        if ('ltss' >< tolower(check)) ltss_caveat_required = TRUE;
        check_flag++;
      }
      if (!check_flag) continue;
    }
    if (rpm_check(release:_release, sp:sp, cpu:_cpu, reference:reference, rpm_spec_vers_cmp:rpm_spec_vers_cmp)) flag++;
  }
}

if (flag)
{
  var ltss_plugin_caveat = NULL;
  if(ltss_caveat_required) ltss_plugin_caveat = '\n' +
    'NOTE: This vulnerability check contains fixes that apply to\n' +
    'packages only available in SUSE Enterprise Linux Server LTSS\n' +
    'repositories. Access to these package security updates require\n' +
    'a paid SUSE LTSS subscription.\n';
  security_report_v4(
      port       : 0,
      severity   : SECURITY_HOLE,
      extra      : rpm_report_get() + ltss_plugin_caveat
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'libjavascriptcoregtk-4_0-18 / libwebkit2gtk-4_0-37 / etc');
}
VendorProductVersionCPE
novellsuse_linuxtypelib-1_0-webkit2-4_0p-cpe:/a:novell:suse_linux:typelib-1_0-webkit2-4_0
novellsuse_linuxlibjavascriptcoregtk-4_0-18p-cpe:/a:novell:suse_linux:libjavascriptcoregtk-4_0-18
novellsuse_linuxlibwebkit2gtk3-langp-cpe:/a:novell:suse_linux:libwebkit2gtk3-lang
novellsuse_linuxlibwebkit2gtk-4_0-37p-cpe:/a:novell:suse_linux:libwebkit2gtk-4_0-37
novellsuse_linuxwebkit2gtk3-develp-cpe:/a:novell:suse_linux:webkit2gtk3-devel
novellsuse_linuxtypelib-1_0-webkit2webextension-4_0p-cpe:/a:novell:suse_linux:typelib-1_0-webkit2webextension-4_0
novellsuse_linux15cpe:/o:novell:suse_linux:15
novellsuse_linuxwebkit2gtk-4_0-injected-bundlesp-cpe:/a:novell:suse_linux:webkit2gtk-4_0-injected-bundles
novellsuse_linuxtypelib-1_0-javascriptcore-4_0p-cpe:/a:novell:suse_linux:typelib-1_0-javascriptcore-4_0

Related

fedora 2
osv 7
nessus 21
apple 9
debian 1
hivepro 1
openvas 10
ubuntu 1
talosblog 2
thn 4
debiancve 2
redhat 4
rocky 1
prion 2
cvelist 2
cisa_kev 2
almalinux 2
redhatcve 2
oraclelinux 2
nvd 2
attackerkb 2
cve 2
ubuntucve 2
wolfi 1
amazon 1
gentoo 1
avleonov 1
mageia 1
hp 1
oracle 1
fedora
fedora
[SECURITY] Fedora 39 Update: webkitgtk-2.42.3-1.fc39
2023-12-09 02:44:16
[SECURITY] Fedora 38 Update: webkitgtk-2.42.3-1.fc38
2023-12-09 02:47:43
osv
osv
webkit2gtk - security update
2023-12-11 00:00:00
webkit2gtk vulnerabilities
2023-12-11 12:32:24
Important: webkit2gtk3 security update
2023-12-11 00:00:00
nessus
nessus
SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2023:4827-1)
2023-12-15 00:00:00
Ubuntu 22.04 LTS / 23.04 / 23.10 : WebKitGTK vulnerabilities (USN-6545-1)
2023-12-11 00:00:00
SUSE SLES15 Security Update : webkit2gtk3 (SUSE-SU-2023:4829-1)
2023-12-15 00:00:00
apple
apple
About the security content of Safari 17.1.2
2023-11-30 00:00:00
About the security content of macOS Sonoma 14.1.2
2023-11-30 00:00:00
About the security content of iOS 17.1.2 and iPadOS 17.1.2
2023-11-30 00:00:00
debian
debian
[SECURITY] [DSA 5575-1] webkit2gtk security update
2023-12-11 22:15:28
hivepro
hivepro
Apple’s Timely Response to Actively Exploited Zero-Days
2023-12-14 08:27:54
openvas
openvas
Fedora: Security Advisory for webkitgtk (FEDORA-2023-540bb86780)
2023-12-10 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:4824-1)
2023-12-15 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:4829-1)
2023-12-15 00:00:00
ubuntu
ubuntu
WebKitGTK vulnerabilities
2023-12-11 00:00:00
talosblog
talosblog
Cybersecurity considerations to have when shopping for holiday gifts
2023-12-07 19:00:40
Why is the cost of cyber insurance rising?
2024-01-25 19:00:35
thn
thn
Zero-Day Alert: Apple Rolls Out iOS, macOS, and Safari Patches for 2 Actively Exploited Flaws
2023-12-01 04:25:00
Apple Issues Patch for Critical Zero-Day in iPhones, Macs - Update Now
2024-01-23 01:30:00
Apple Releases Security Updates to Patch Critical iOS and macOS Security Flaws
2023-12-12 06:44:00
debiancve
debiancve
CVE-2023-42917
2023-11-30 23:15:07
CVE-2023-42916
2023-11-30 23:15:07
redhat
redhat
(RHSA-2023:7716) Important: webkit2gtk3 security update
2023-12-11 09:28:55
(RHSA-2023:7715) Important: webkit2gtk3 security update
2023-12-11 09:27:25
(RHSA-2024:1859) Moderate: OpenShift API for Data Protection (OADP) 1.3.1 security and bug fix update
2024-04-16 17:23:39
rocky
rocky
webkit2gtk3 security update
2024-01-09 04:07:10
prion
prion
Memory corruption
2023-11-30 23:15:00
Input validation
2023-11-30 23:15:00
cvelist
cvelist
CVE-2023-42917
2023-11-30 22:18:50
CVE-2023-42916
2023-11-30 22:18:49
cisa_kev
cisa_kev
Apple Multiple Products WebKit Memory Corruption Vulnerability
2023-12-04 00:00:00
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
2023-12-04 00:00:00
almalinux
almalinux
Important: webkit2gtk3 security update
2023-12-11 00:00:00
Important: webkit2gtk3 security update
2023-12-11 00:00:00
redhatcve
redhatcve
CVE-2023-42917
2023-12-06 01:32:18
CVE-2023-42916
2023-12-06 01:32:09
oraclelinux
oraclelinux
webkit2gtk3 security update
2023-12-13 00:00:00
webkit2gtk3 security update
2023-12-13 00:00:00
nvd
nvd
CVE-2023-42917
2023-11-30 23:15:07
CVE-2023-42916
2023-11-30 23:15:07
attackerkb
attackerkb
CVE-2023-42917
2023-11-30 00:00:00
CVE-2023-42916
2023-11-30 00:00:00
cve
cve
CVE-2023-42916
2023-11-30 23:15:07
CVE-2023-42917
2023-11-30 23:15:07
ubuntucve
ubuntucve
CVE-2023-42916
2023-11-30 00:00:00
CVE-2023-42917
2023-11-30 00:00:00
wolfi
wolfi
CVE-2023-42917 vulnerabilities
2024-06-26 09:08:30
amazon
amazon
Important: webkitgtk4
2024-01-19 01:51:00
gentoo
gentoo
WebKitGTK+: Multiple Vulnerabilities
2024-01-05 00:00:00
avleonov
avleonov
November 2023 – January 2024: New Vulristics Features, 3 Months of Microsoft Patch Tuesdays and Linux Patch Wednesdays, Year 2023 in Review
2024-02-01 17:07:20
mageia
mageia
Updated webkit2 packages fix security vulnerabilities
2024-04-26 09:47:12
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.4%

JSON
Related for SUSE_SU-2023-4824-1.NASL
fedora2osv7nessus21apple9debian1hivepro1openvas10ubuntu1talosblog2thn4debiancve2redhat4rocky1prion2cvelist2cisa_kev2almalinux2redhatcve2oraclelinux2nvd2attackerkb2cve2ubuntucve2wolfi1amazon1gentoo1avleonov1mageia1hp1oracle1