CVE-2020-11793
Fixed in a distro release EPSS 3%
A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash).
Products: webkitgtk, wpewebkit wpe_webkit, canonical ubuntu_linux, fedoraproject fedora, opensuse leap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | LibRaw-devel | 0.19.5-2.el8 |
| AlmaLinux 8 | PackageKit | 1.1.12-6.el8 |
| AlmaLinux 8 | PackageKit-command-not-found | 1.1.12-6.el8 |
| AlmaLinux 8 | PackageKit-cron | 1.1.12-6.el8 |
| AlmaLinux 8 | PackageKit-glib | 1.1.12-6.el8 |
| AlmaLinux 8 | PackageKit-glib-devel | 1.1.12-6.el8 |
| AlmaLinux 8 | PackageKit-gstreamer-plugin | 1.1.12-6.el8 |
| AlmaLinux 8 | PackageKit-gtk3-module | 1.1.12-6.el8 |
| AlmaLinux 8 | dleyna-renderer | 0.6.0-3.el8 |
| AlmaLinux 8 | frei0r-devel | 1.6.1-7.el8 |
| AlmaLinux 8 | frei0r-plugins | 1.6.1-7.el8 |
| AlmaLinux 8 | frei0r-plugins-opencv | 1.6.1-7.el8 |
| AlmaLinux 8 | gnome-remote-desktop | 0.1.8-3.el8 |
| AlmaLinux 8 | gtk-doc | 1.28-2.el8 |
| AlmaLinux 8 | gvfs | 1.36.2-10.el8 |
| AlmaLinux 8 | libsoup | 2.62.3-2.el8 |
| AlmaLinux 8 | libsoup-devel | 2.62.3-2.el8 |
| AlmaLinux 8 | mutter-devel | 3.32.2-48.el8 |
| AlmaLinux 8 | nautilus | 3.28.1-14.el8 |
| AlmaLinux 8 | nautilus-devel | 3.28.1-14.el8 |
| AlmaLinux 8 | pipewire | 0.3.6-1.el8 |
| AlmaLinux 8 | pipewire-devel | 0.3.6-1.el8 |
| AlmaLinux 8 | pipewire-doc | 0.3.6-1.el8 |
| AlmaLinux 8 | pipewire-libs | 0.3.6-1.el8 |
| AlmaLinux 8 | pipewire-utils | 0.3.6-1.el8 |
| AlmaLinux 8 | pipewire0.2-devel | 0.2.7-6.el8 |
| AlmaLinux 8 | pipewire0.2-libs | 0.2.7-6.el8 |
| AlmaLinux 8 | potrace | 1.15-3.el8 |
| AlmaLinux 8 | pygobject3-devel | 3.28.3-2.el8 |
| AlmaLinux 8 | python3-gobject | 3.28.3-2.el8 |
| AlmaLinux 8 | python3-gobject-base | 3.28.3-2.el8 |
| AlmaLinux 8 | tracker | 2.1.5-2.el8 |
| AlmaLinux 8 | tracker-devel | 2.1.5-2.el8 |
| AlmaLinux 8 | vte-profile | 0.52.4-2.el8 |
| AlmaLinux 8 | vte291 | 0.52.4-2.el8 |
| AlmaLinux 8 | vte291-devel | 0.52.4-2.el8 |
| AlmaLinux 8 | webrtc-audio-processing | 0.3-9.el8 |
| AlmaLinux 8 | xdg-desktop-portal-gtk | 1.6.0-1.el8 |
| Amazon Linux 2 | webkitgtk4 | 2.28.2-2.amzn2.0.1 |
| Amazon Linux 2 | webkitgtk4-devel | 2.28.2-2.amzn2.0.1 |
| Amazon Linux 2 | webkitgtk4-doc | 2.28.2-2.amzn2.0.1 |
| Amazon Linux 2 | webkitgtk4-jsc | 2.28.2-2.amzn2.0.1 |
| Amazon Linux 2 | webkitgtk4-jsc-devel | 2.28.2-2.amzn2.0.1 |
| Debian 10 | webkit2gtk | 2.26.4-1~deb10u3 |
| Debian 12 | webkit2gtk | 2.28.1-1 |
| Debian 12 | wpewebkit | 2.28.1-1 |
| Debian 13 | webkit2gtk | 2.28.1-1 |
| Debian 13 | wpewebkit | 2.28.1-1 |
| Debian 14 | webkit2gtk | 2.28.1-1 |
| Debian 14 | wpewebkit | 2.28.1-1 |
| Red Hat Enterprise Linux 7 | webkitgtk4 | 0:2.28.2-2.el7 |
| Red Hat Enterprise Linux 7 | webkitgtk4-debuginfo | 0:2.28.2-2.el7 |
| Red Hat Enterprise Linux 7 | webkitgtk4-devel | 0:2.28.2-2.el7 |
| Red Hat Enterprise Linux 7 | webkitgtk4-doc | 0:2.28.2-2.el7 |
| Red Hat Enterprise Linux 7 | webkitgtk4-jsc | 0:2.28.2-2.el7 |
| Red Hat Enterprise Linux 7 | webkitgtk4-jsc-devel | 0:2.28.2-2.el7 |
| Red Hat Enterprise Linux 8 | LibRaw | 0:0.19.5-2.el8 |
| Red Hat Enterprise Linux 8 | LibRaw-debuginfo | 0:0.19.5-2.el8 |
| Red Hat Enterprise Linux 8 | LibRaw-debugsource | 0:0.19.5-2.el8 |
| Red Hat Enterprise Linux 8 | LibRaw-devel | 0:0.19.5-2.el8 |
| Red Hat Enterprise Linux 8 | LibRaw-samples-debuginfo | 0:0.19.5-2.el8 |
| Red Hat Enterprise Linux 8 | gnome-settings-daemon | 0:3.32.0-11.el8 |
| Red Hat Enterprise Linux 8 | gnome-settings-daemon-debuginfo | 0:3.32.0-11.el8 |
| Red Hat Enterprise Linux 8 | gnome-settings-daemon-debugsource | 0:3.32.0-11.el8 |
| Red Hat Enterprise Linux 8 | webkit2gtk3 | 0:2.28.4-1.el8 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-debuginfo | 0:2.28.4-1.el8 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-debugsource | 0:2.28.4-1.el8 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-devel | 0:2.28.4-1.el8 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-devel-debuginfo | 0:2.28.4-1.el8 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc | 0:2.28.4-1.el8 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc-debuginfo | 0:2.28.4-1.el8 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc-devel | 0:2.28.4-1.el8 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc-devel-debuginfo | 0:2.28.4-1.el8 |
| Rocky Linux 8 | LibRaw | 0:0.19.5-2.el8 |
| Rocky Linux 8 | PackageKit | 0:1.1.12-6.el8 |
| Rocky Linux 8 | PackageKit | 0:1.1.12-6.el8.0.2 |
| Rocky Linux 8 | dleyna-renderer | 0:0.6.0-3.el8 |
| Rocky Linux 8 | frei0r-plugins | 0:1.6.1-7.el8 |
| Rocky Linux 8 | gnome-remote-desktop | 0:0.1.8-3.el8 |
| Rocky Linux 8 | gnome-session | 0:3.28.1-10.el8 |
| Rocky Linux 8 | gsettings-desktop-schemas | 0:3.32.0-5.el8 |
| Rocky Linux 8 | gtk3 | 0:3.22.30-6.el8 |
| Rocky Linux 8 | libsoup | 0:2.62.3-2.el8 |
| Rocky Linux 8 | pipewire | 0:0.3.6-1.el8 |
| Rocky Linux 8 | pipewire0.2 | 0:0.2.7-6.el8 |
| Rocky Linux 8 | potrace | 0:1.15-3.el8 |
| Rocky Linux 8 | pygobject3 | 0:3.28.3-2.el8 |
| Rocky Linux 8 | tracker | 0:2.1.5-2.el8 |
| Rocky Linux 8 | vte291 | 0:0.52.4-2.el8 |
| Rocky Linux 8 | webrtc-audio-processing | 0:0.3-9.el8 |
| Rocky Linux 8 | xdg-desktop-portal-gtk | 0:1.6.0-1.el8 |
| SUSE Enterprise Storage 5 | webkit2gtk3 | 2.28.1-2.50.3 |
| SUSE HPE Helion OpenStack 8 | webkit2gtk3 | 2.28.1-2.50.3 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | webkit2gtk3 | 2.28.1-3.49.2 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | webkit2gtk3 | 2.28.1-3.49.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | webkit2gtk3 | 2.28.1-3.49.2 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP1 | webkit2gtk3 | 2.28.1-3.49.2 |
| SUSE Linux Enterprise Server 12 SP2-BCL | webkit2gtk3 | 2.28.1-2.50.3 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | webkit2gtk3 | 2.28.1-2.50.3 |
| SUSE Linux Enterprise Server 12 SP3-BCL | webkit2gtk3 | 2.28.1-2.50.3 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | webkit2gtk3 | 2.28.1-2.50.3 |
| SUSE Linux Enterprise Server 12 SP4 | webkit2gtk3 | 2.28.1-2.50.3 |
| SUSE Linux Enterprise Server 12 SP5 | webkit2gtk3 | 2.28.1-2.50.3 |
| SUSE Linux Enterprise Server 15-LTSS | webkit2gtk3 | 2.28.1-3.49.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | webkit2gtk3 | 2.28.1-2.50.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | webkit2gtk3 | 2.28.1-2.50.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | webkit2gtk3 | 2.28.1-2.50.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | webkit2gtk3 | 2.28.1-2.50.3 |
| SUSE Linux Enterprise Server for SAP Applications 15 | webkit2gtk3 | 2.28.1-3.49.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | webkit2gtk3 | 2.28.1-2.50.3 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | webkit2gtk3 | 2.28.1-2.50.3 |
| SUSE Linux Enterprise Workstation Extension 12 SP4 | webkit2gtk3 | 2.28.1-2.50.3 |
| SUSE OpenStack Cloud 7 | webkit2gtk3 | 2.28.1-2.50.3 |
| SUSE OpenStack Cloud 8 | webkit2gtk3 | 2.28.1-2.50.3 |
| SUSE OpenStack Cloud Crowbar 8 | webkit2gtk3 | 2.28.1-2.50.3 |
| Ubuntu 16.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 16.04 LTS | qtwebkit-source | no fix |
| Ubuntu 16.04 LTS | webkit2gtk | no fix |
| Ubuntu 16.04 LTS | webkitgtk | no fix |
| Ubuntu 18.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 18.04 LTS | qtwebkit-source | no fix |
| Ubuntu 18.04 LTS | webkit2gtk | 2.28.1-0ubuntu0.18.04.1 |
| Ubuntu 18.04 LTS | webkitgtk | no fix |
| Ubuntu 20.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 20.04 LTS | webkit2gtk | 2.28.1-1 |
| Ubuntu 22.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 24.04 LTS | qtwebkit-opensource-src | no fix |
| openSUSE Leap 15.1 | webkit2gtk3 | 2.28.1-lp151.2.15.2 |
| openSUSE Tumbleweed | gtk3 | 2.32.4-1.1 |