PT-2019-19166 · Webkit+7 · Webkitgtk+7

Wen Xu · Published 2019-09-25 · Updated 2023-03-11 · CVE-2019-8720

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WebKitGTK (affected versions not specified)

Description A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALSA-2020:4451

ALT-PU-2019-2782

CESA-2020_4035

CESA-2020_4451

CVE-2019-8720

DSA-4558-1

MGASA-2019-0324

OPENSUSE-SU-2019:2587-1

OPENSUSE-SU-2019:2591-1

OPENSUSE-SU-2019_2587-1

OPENSUSE-SU-2019_2591-1

RHSA-2020:4035

RHSA-2020:4451

RHSA-2020_4035

RHSA-2020_4451

RLSA-2020:4451

SUSE-SU-2019:3044-1

SUSE-SU-2020:1135-1

USN-4178-1

Affected Products

Alt Linux

Almalinux

Centos

Red Hat

Rocky Linux

Suse

Ubuntu

Webkitgtk

References · 254

• https://osv.dev/vulnerability/MGASA-2019-0324 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2019-0324.html · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-8720 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-8720 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-8720 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-8720 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2019:2587-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2019:2591-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1135-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-8720 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2020:4451 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2020-4451.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-8720 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-8769 · Vendor Advisory
• https://webkitgtk.org/security/WSA-2019-0005.html · Vendor Advisory