CVE-2023-41983
Summary
| CVE | CVE-2023-41983 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-10-25 19:15:00 UTC |
| Updated | 2024-01-31 15:15:00 UTC |
| Description | The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, Safari 17.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. Processing web content may lead to a denial-of-service. |
Risk And Classification
Problem Types: CWE-119
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Apple | Ipados | All | All | All | All |
| Operating System | Apple | Iphone Os | All | All | All | All |
| Operating System | Apple | Macos | All | All | All | All |
| Application | Apple | Safari | All | All | All | All |
| Operating System | Debian | Debian Linux | 11.0 | All | All | All |
| Operating System | Debian | Debian Linux | 12.0 | All | All | All |
| Operating System | Fedoraproject | Fedora | 37 | All | All | All |
| Operating System | Fedoraproject | Fedora | 38 | All | All | All |
| Operating System | Fedoraproject | Fedora | 39 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.openwall.com/lists/oss-security/2023/11/15/1 | www.openwall.com | ||
| Full Disclosure: APPLE-SA-10-25-2023-1 iOS 17.1 and iPadOS 17.1 | MISC | seclists.org | |
| About the security content of macOS Sonoma 14.1 - Apple Support | support.apple.com | ||
| WebKitGTK+: Multiple Vulnerabilities (GLSA 202401-33) — Gentoo security | security.gentoo.org | ||
| Full Disclosure: APPLE-SA-10-25-2023-2 iOS 16.7.2 and iPadOS 16.7.2 | MISC | seclists.org | |
| www.debian.org/security/2023/dsa-5557 | www.debian.org | ||
| About the security content of iOS 17.1 and iPadOS 17.1 - Apple Support | MISC | support.apple.com | |
| [SECURITY] Fedora 37 Update: webkitgtk-2.42.2-1.fc37 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| About the security content of macOS Sonoma 14.1 - Apple Support | MISC | support.apple.com | |
| lists.fedoraproject.org/archives/list/[email protected]/messag... | lists.fedoraproject.org | ||
| Full Disclosure: APPLE-SA-10-25-2023-9 Safari 17.1 | MISC | seclists.org | |
| About the security content of Safari 17.1 - Apple Support | MISC | support.apple.com | |
| About the security content of iOS 16.7.2 and iPadOS 16.7.2 - Apple Support | MISC | support.apple.com | |
| lists.fedoraproject.org/archives/list/[email protected]/messag... | lists.fedoraproject.org | ||
| Full Disclosure: APPLE-SA-10-25-2023-4 macOS Sonoma 14.1 | MISC | seclists.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 199922 Ubuntu Security Notification for WebKitGTK Vulnerabilities (USN-6490-1)
- 284735 Fedora Security Update for webkitgtk (FEDORA-2023-cb3cacfef8)
- 284770 Fedora Security Update for webkitgtk (FEDORA-2023-11aaf99627)
- 285123 Fedora Security Update for webkitgtk (FEDORA-2023-8f84dc8e09)
- 357018 Amazon Linux Security Advisory for webkitgtk4 : ALAS2-2024-2427
- 378968 Apple Safari Multiple Vulnerabilities (HT213986)
- 378975 Apple MacOS Sonoma 14.1 Not Installed (HT213984)
- 6000328 Debian Security Update for webkit2gtk (DSA 5557-1)
- 610521 Apple iOS 17.1 and iPadOS 17.1 Security Update Missing (HT213982)
- 610523 Apple iOS 16.7.2 and iPadOS 16.7.2 Security Update Missing (HT213981)
- 710848 Gentoo Linux WebKitGTK+ Multiple Vulnerabilities (GLSA 202401-33)