The remote SUSE Linux SLED12 / SLED_SAP12 / SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4827-1 advisory.

  - An out-of-bounds read was addressed with improved input validation. (CVE-2023-42916)

  - A memory corruption vulnerability was addressed with improved locking. (CVE-2023-42917)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 17.1.2. It is, therefore, affected by multiple vulnerabilities.

The version of Apple iOS running on the mobile device is prior to 16.7.3. It is, therefore, affected by multiple vulnerabilities.

The version of Apple iOS running on the mobile device is prior to 15.8.1. It is, therefore, affected by multiple vulnerabilities.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4202 advisory.

    WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

    Security Fix(es):

    * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-32435)

    * webkitgtk: type confusion issue leading to arbitrary code execution (CVE-2023-32439)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.1.2. It is, therefore, affected by multiple vulnerabilities:

  - An out-of-bounds read was addressed with improved input validation. (CVE-2023-42916)

  - A memory corruption vulnerability was addressed with improved locking. (CVE-2023-42917)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-540bb86780 advisory.

  - An out-of-bounds read was addressed with improved input validation. (CVE-2023-42916)

  - A memory corruption vulnerability was addressed with improved locking. (CVE-2023-42917)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6545-1 advisory.

  - An out-of-bounds read was addressed with improved input validation. (CVE-2023-42916)

  - A memory corruption vulnerability was addressed with improved locking. (CVE-2023-42917)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5575 advisory.

  - An out-of-bounds read was addressed with improved input validation. (CVE-2023-42916)

  - A memory corruption vulnerability was addressed with improved locking. (CVE-2023-42917)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202401-04 (WebKitGTK+: Multiple Vulnerabilities)

  - A use-after-free issue was addressed with improved memory management. (CVE-2023-28198)

  - An out-of-bounds read was addressed with improved input validation. (CVE-2023-28204)

  - A logic issue was addressed with improved validation. (CVE-2023-32370)

  - A use-after-free issue was addressed with improved memory management. (CVE-2023-32373)

  - The issue was addressed with improved memory handling. (CVE-2023-32393)

  - A type confusion issue was addressed with improved checks. (CVE-2023-32439)

  - The issue was addressed with improved checks. (CVE-2023-37450)

  - The issue was addressed with improved checks. (CVE-2023-38133)

  - The issue was addressed with improved checks. (CVE-2023-38572)

  - A logic issue was addressed with improved restrictions. (CVE-2023-38592)

  - The issue was addressed with improved checks. (CVE-2023-38594)

  - The issue was addressed with improved checks. (CVE-2023-38595, CVE-2023-38600)

  - The issue was addressed with improved checks. (CVE-2023-38597)

  - A logic issue was addressed with improved state management. (CVE-2023-38599)

  - The issue was addressed with improved memory handling. (CVE-2023-38611)

  - The issue was addressed with improved checks. (CVE-2023-40397)

  - An out-of-bounds read was addressed with improved input validation. (CVE-2023-42916)

  - A memory corruption vulnerability was addressed with improved locking. (CVE-2023-42917)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4828-1 advisory.

  - An out-of-bounds read was addressed with improved input validation. (CVE-2023-42916)

  - A memory corruption vulnerability was addressed with improved locking. (CVE-2023-42917)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
186997	SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2023:4827-1)	Nessus	SuSE Local Security Checks	2023/12/15	2024/2/28	high
186508	Apple iOS < 17.1.2 Multiple Vulnerabilities (HT214031)	Nessus	Mobile Devices	2023/12/1	2026/3/23	high
186908	Apple iOS < 16.7.3 Multiple Vulnerabilities (HT214034)	Nessus	Mobile Devices	2023/12/14	2026/3/23	high
189362	Apple iOS < 15.8.1 Multiple Vulnerabilities (HT214062)	Nessus	Mobile Devices	2024/1/23	2026/3/23	high
178440	RHEL 8 : webkit2gtk3 (RHSA-2023:4202)	Nessus	Red Hat Local Security Checks	2023/7/18	2025/9/11	high
186626	macOS 14.x < 14.1.2 Multiple Vulnerabilities (HT214032)	Nessus	MacOS X Local Security Checks	2023/12/6	2024/6/14	high
186703	Fedora 38 : webkitgtk (2023-540bb86780)	Nessus	Fedora Local Security Checks	2023/12/8	2024/2/28	high
186717	Ubuntu 22.04 LTS / 23.04 / 23.10 : WebKitGTK vulnerabilities (USN-6545-1)	Nessus	Ubuntu Local Security Checks	2023/12/11	2024/2/28	high
186738	Debian DSA-5575-1 : webkit2gtk - security update	Nessus	Debian Local Security Checks	2023/12/11	2024/2/28	high
187653	GLSA-202401-04 : WebKitGTK+: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2024/1/5	2024/2/28	critical
276044	TencentOS Server 2: webkitgtk4 (TSSA-2025:0554)	Nessus	Tencent Local Security Checks	2025/11/20	2026/3/7	critical
187024	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : webkit2gtk3 (SUSE-SU-2023:4828-1)	Nessus	SuSE Local Security Checks	2023/12/15	2024/2/28	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

critical

critical

high