Lucene search

K
redosRedosROS-20240726-06
HistoryJul 26, 2024 - 12:00 a.m.

ROS-20240726-06

2024-07-2600:00:00
redos.red-soft.ru
4
webkit
webkitgtk
wpe
vulnerability
sandbox traversal
remote attacker
integrity
unix

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

5.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

AI Score

6.5

Confidence

Low

The vulnerability in the WebKitGTK and WPE WebKit web page display modules is related to the existence of a method of
limited sandbox traversal, which allows an isolated process to trick host processes into thinking that the isolated process is not sandboxed.
them into thinking that the isolated process is not sandbox-restricted. Exploiting the vulnerability could allow
An attacker acting remotely to affect the integrity of protected information

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64webkit2gtk3< 2.35.1-5UNKNOWN

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

5.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

AI Score

6.5

Confidence

Low