CVE-2023-38592
Summary
| CVE | CVE-2023-38592 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-07-28 05:15:00 UTC |
| Updated | 2024-01-05 14:15:00 UTC |
| Description | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16.6 and iPadOS 16.6, watchOS 9.6, tvOS 16.6, macOS Ventura 13.5. Processing web content may lead to arbitrary code execution. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Debian -- Security Information -- DSA-5468-1 webkit2gtk | MISC | www.debian.org | |
| [SECURITY] Fedora 38 Update: webkitgtk-2.40.5-1.fc38 - package-announce - Fedora Mailing-Lists | MISC | lists.fedoraproject.org | |
| oss-security - WebKitGTK and WPE WebKit Security Advisory WSA-2023-0007 | MISC | www.openwall.com | |
| security.gentoo.org/glsa/202401-04 | security.gentoo.org | ||
| About the security content of macOS Ventura 13.5 - Apple Support | MISC | support.apple.com | |
| [SECURITY] Fedora 37 Update: webkitgtk-2.40.5-1.fc37 - package-announce - Fedora Mailing-Lists | MISC | lists.fedoraproject.org | |
| About the security content of watchOS 9.6 - Apple Support | MISC | support.apple.com | |
| About the security content of tvOS 16.6 - Apple Support | MISC | support.apple.com | |
| About the security content of iOS 16.6 and iPadOS 16.6 - Apple Support | MISC | support.apple.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 161084 Oracle Enterprise Linux Security Update for webkit2gtk3 (ELSA-2023-6535)
- 161167 Oracle Enterprise Linux Security Update for webkit2gtk3 (ELSA-2023-7055)
- 199658 Ubuntu Security Notification for WebKitGTK Vulnerabilities (USN-6289-1)
- 242303 Red Hat Update for webkit2gtk3 (RHSA-2023:6535)
- 242457 Red Hat Update for webkit2gtk3 (RHSA-2023:7055)
- 284360 Fedora Security Update for webkitgtk (FEDORA-2023-a479289864)
- 284417 Fedora Security Update for webkitgtk (FEDORA-2023-19754c5a93)
- 356402 Amazon Linux Security Advisory for webkitgtk4 : ALAS2-2023-2270
- 378687 Apple macOS Ventura 13.5 Not Installed (HT213843)
- 378690 Apple Safari Multiple Vulnerabilities (HT213847)
- 6000203 Debian Security Update for webkit2gtk (DSA 5468-1)
- 710824 Gentoo Linux WebKitGTK+ Multiple Vulnerabilities (GLSA 202401-04)
- 754255 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2023:3233-1)
- 754260 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2023:3237-1)
- 754273 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2023:3300-1)
- 941362 AlmaLinux Security Update for webkit2gtk3 (ALSA-2023:6535)
- 941448 AlmaLinux Security Update for webkit2gtk3 (ALSA-2023:7055)