The remote Ubuntu 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6490-1 advisory.

    Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were     tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to     web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary     code execution.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8032:02 advisory.

    * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-40414)
      * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-42852)
      * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-23213)
      * webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents     (CVE-2014-1745)
      * webkitgtk: User password may be read aloud by a text-to-speech accessibility feature (CVE-2023-32359)
      * webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports     (CVE-2023-39928)
      * webkitgtk: Processing web content may lead to a denial of service (CVE-2023-41983)
      * webkitgtk: processing a malicious image may lead to a denial of service (CVE-2023-42883)
      * webkitgtk: processing malicious web content may lead to arbitrary code execution (CVE-2023-42890)
      * webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-23206)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:2982 advisory.

    * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-40414)

    * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-42852)

    * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-23213)

    * webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents     (CVE-2014-1745)

    * webkitgtk: User password may be read aloud by a text-to-speech accessibility feature (CVE-2023-32359)

    * webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (CVE-2023-39928)

    * webkitgtk: Processing web content may lead to a denial of service (CVE-2023-41983)

    * webkitgtk: processing a malicious image may lead to a denial of service (CVE-2023-42883)

    * webkitgtk: processing malicious web content may lead to arbitrary code execution (CVE-2023-42890)

    * webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-23206)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4561-1 advisory.

    Update to version 2.42.2 (bsc#1217210):

    - CVE-2023-41983: Processing web content may lead to a denial-of-service.
    - CVE-2023-42852: Processing web content may lead to arbitrary code execution.

    Already previously fixed:

    - CVE-2022-32919: Visiting a website that frames malicious content may lead to UI spoofing (fixed already     in 2.38.4).
    - CVE-2022-32933: A website may be able to track the websites a user visited in private browsing mode     (fixed already in 2.38.0).
    - CVE-2022-46705: Visiting a malicious website may lead to address bar spoofing (fixed already in 2.38.4).
    - CVE-2022-46725: Visiting a malicious website may lead to address bar spoofing (fixed already in 2.38.4).
    - CVE-2023-32359: A users password may be read aloud by a text-to-speech accessibility feature (fixed     already in 2.42.0).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2982 advisory.

    WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

    Security Fix(es):

    * webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (CVE-2023-39928)

    * webkitgtk: Arbitrary Remote Code Execution (CVE-2023-42917)

    * webkitgtk: processing a malicious image may lead to a denial of service (CVE-2023-42883)

    * webkitgtk: processing malicious web content may lead to arbitrary code execution (CVE-2023-42890)

    * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-40414)

    * webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents     (CVE-2014-1745)

    * webkitgtk: User password may be read aloud by a text-to-speech accessibility feature (CVE-2023-32359)

    * webkitgtk: Processing web content may lead to a denial of service (CVE-2023-41983)

    * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-42852)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8492 advisory.

    WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

    Security Fix(es):

    * webkitgtk: Memory corruption issue when processing web content (CVE-2022-32885)

    * webkitgtk: arbitrary javascript code execution (CVE-2023-40397)

    * webkitgtk: Arbitrary Remote Code Execution (CVE-2023-42917)

    * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-42852)

    * chromium-browser: Use after free in ANGLE (CVE-2024-4558)

    * webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution (CVE-2024-40776)

    * webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process     crash (CVE-2024-40789)

    * webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40780)

    * webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40779)

    * webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management (CVE-2024-40782)

    * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-27820)

    * webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution     (CVE-2024-27851)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
186015	Ubuntu 22.04 LTS / 23.04 / 23.10 : WebKitGTK vulnerabilities (USN-6490-1)	Nessus	Ubuntu Local Security Checks	2023/11/20	2024/8/27	high
292205	MiracleLinux 9 : webkit2gtk3-2.42.5-1.el9 (AXSA:2024-8032:02)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	critical
200629	Rocky Linux 8 : webkit2gtk3 (RLSA-2024:2982)	Nessus	Rocky Linux Local Security Checks	2024/6/14	2024/6/14	critical
186262	SUSE SLED15: WebKitGTK-4.0-lang / WebKitGTK-4.1-lang / WebKitGTK-6.0-lang / etc (SUSE-SU-2023:4561-1)	Nessus	SuSE Local Security Checks	2023/11/25	2026/6/25	high
197749	RHEL 8 : webkit2gtk3 (RHSA-2024:2982)	Nessus	Red Hat Local Security Checks	2024/5/23	2025/8/15	critical
209882	RHEL 9 : webkit2gtk3 (RHSA-2024:8492)	Nessus	Red Hat Local Security Checks	2024/10/29	2025/8/15	critical

检测

插件搜索

high

critical

critical

high

critical

critical