PT-2016-6119 · Apple+2 · Webkitgtk+2

Publicado 2016-09-28 · Atualizado 2020-07-10 · CVE-2016-4761

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WebKitGTK+ versions prior to 2.14.0

Description A use-after-free issue allows remote attackers to cause a denial of service.

Recommendations For versions prior to 2.14.0, update to version 2.14.0 or later to resolve the issue.

Correção

DoS

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2016-2042

CVE-2016-4761

MGASA-2017-0069

USN-3166-1

Produtos afetados

Alt Linux

Ubuntu

Webkitgtk

Referências · 40

• https://ubuntu.com/security/CVE-2016-4769 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-4733 · Aviso do Fabricante
• https://webkitgtk.org/2017/01/17/webkitgtk2.14.3-released.html · Nota
• https://ubuntu.com/security/CVE-2016-4735 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-4760 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-4762 · Aviso do Fabricante
• https://webkitgtk.org/2016/09/20/webkitgtk2.14.0-released.html · Nota
• https://ubuntu.com/security/CVE-2016-4666 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2017-0069.html · Nota de Segurança
• https://webkitgtk.org/security/WSA-2017-0001.html · Nota
• https://ubuntu.com/security/CVE-2016-4613 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-3166-1 · Aviso do Fabricante
• https://webkitgtk.org/security/WSA-2016-0006.html · Nota
• http://ubuntu.com/usn/USN-3166-1 · Nota
• https://osv.dev/vulnerability/CVE-2016-4761 · Aviso do Fabricante