PT-2020-6812 · Webkitgtk+8 · Webkitgtk+8

Cim Stordal · Published 2020-04-13 · Updated 2024-06-15 · CVE-2020-11793

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WebKitGTK versions prior to 2.28.1 WPE WebKit versions prior to 2.28.1

Description The issue is related to a use-after-free problem in the WebKitGTK and WPE WebKit modules for displaying web pages. This can be exploited by a remote attacker using specially crafted web content, potentially allowing them to execute arbitrary code or cause a denial of service, which may result in memory corruption and application crash.

Recommendations For WebKitGTK versions prior to 2.28.1, update to version 2.28.1 or later to resolve the issue. For WPE WebKit versions prior to 2.28.1, update to version 2.28.1 or later to resolve the issue.

Fix

DoS

RCE

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2020:4451

ALT-PU-2020-1711

BDU:2022-07045

CESA-2020_4035

CESA-2020_4451

CVE-2020-11793

DSA-4658-1

MGASA-2020-0177

OPENSUSE-SU-2020:0602-1

OPENSUSE-SU-2020_0602-1

OPENSUSE-SU-2024:11506-1

RHSA-2020:4035

RHSA-2020:4451

RHSA-2020_4035

RHSA-2020_4451

RLSA-2020:4451

SUSE-SU-2020:1109-1

SUSE-SU-2020:1135-1

USN-4331-1

Affected Products

Alt Linux

Almalinux

Centos

Red Hat

Rocky Linux

Suse

Ubuntu

Wpe Webkit

Webkitgtk

References · 353

• https://security.gentoo.org/glsa/202006-08 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2020-4035.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-07045 · Security Note
• https://osv.dev/vulnerability/USN-4331-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-11793 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3P4YISPE5QX4YD54GDRZIH2X5RCH3QGW · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2020:4451 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-11793 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/3P4YISPE5QX4YD54GDRZIH2X5RCH3QGW · Vendor Advisory
• https://wpewebkit.org/security/WSA-2020-0004.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-11793 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-11793 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-11793 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2020-0177.html · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/K3MQTRC6ITFTVS5R5Z24PMJS6FXJKGRD · Vendor Advisory