CVE-2023-2203
Fixed in a distro release EPSS <1%CVSS 8.8
A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free vulnerability. This flaw allows attackers with network access to pass specially crafted web content files, causing a denial of service or arbitrary code execution. This CVE exists because of a CVE-2023-28205 security regression for the WebKitGTK package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.
Products: webkitgtk webkit2gtk3, redhat enterprise_linux, redhat enterprise_linux_eus, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_tus
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | webkit2gtk3 | 2.38.5-1.el8_8.3 |
| AlmaLinux 8 | webkit2gtk3-devel | 2.38.5-1.el8_8.3 |
| AlmaLinux 8 | webkit2gtk3-jsc | 2.38.5-1.el8_8.3 |
| AlmaLinux 8 | webkit2gtk3-jsc-devel | 2.38.5-1.el8_8.3 |
| AlmaLinux 9 | webkit2gtk3 | 2.38.5-1.el9_2.1 |
| AlmaLinux 9 | webkit2gtk3-devel | 2.38.5-1.el9_2.1 |
| AlmaLinux 9 | webkit2gtk3-jsc | 2.38.5-1.el9_2.1 |
| AlmaLinux 9 | webkit2gtk3-jsc-devel | 2.38.5-1.el9_2.1 |
| Amazon Linux 2 | webkitgtk4 | 2.38.5-3.amzn2.0.1 |
| Amazon Linux 2 | webkitgtk4-devel | 2.38.5-3.amzn2.0.1 |
| Amazon Linux 2 | webkitgtk4-jsc | 2.38.5-3.amzn2.0.1 |
| Amazon Linux 2 | webkitgtk4-jsc-devel | 2.38.5-3.amzn2.0.1 |
| Red Hat Enterprise Linux 8 | webkit2gtk3 | 0:2.38.5-1.el8_8.3 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-debuginfo | 0:2.38.5-1.el8_8.3 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-debugsource | 0:2.38.5-1.el8_8.3 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-devel | 0:2.38.5-1.el8_8.3 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-devel-debuginfo | 0:2.38.5-1.el8_8.3 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc | 0:2.38.5-1.el8_8.3 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc-debuginfo | 0:2.38.5-1.el8_8.3 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc-devel | 0:2.38.5-1.el8_8.3 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc-devel-debuginfo | 0:2.38.5-1.el8_8.3 |
| Red Hat Enterprise Linux 9 | webkit2gtk3 | 0:2.38.5-1.el9_2.1 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-debuginfo | 0:2.38.5-1.el9_2.1 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-debugsource | 0:2.38.5-1.el9_2.1 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-devel | 0:2.38.5-1.el9_2.1 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-devel-debuginfo | 0:2.38.5-1.el9_2.1 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-jsc | 0:2.38.5-1.el9_2.1 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-jsc-debuginfo | 0:2.38.5-1.el9_2.1 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-jsc-devel | 0:2.38.5-1.el9_2.1 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-jsc-devel-debuginfo | 0:2.38.5-1.el9_2.1 |
| Rocky Linux 8 | webkit2gtk3 | 0:2.38.5-1.el8_8.3 |
| Ubuntu 16.04 LTS | webkit2gtk | no fix |
| Ubuntu 18.04 LTS | webkit2gtk | no fix |