PT-2023-7605 · Apple+9 · Apple Macos+12

Junsung Lee

·

Published

2023-10-25

·

Updated

2024-08-20

·

CVE-2023-41983

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions macOS Sonoma versions prior to 14.1 Safari versions prior to 17.1 iOS versions prior to 16.7.2 and prior to 17.1 iPadOS versions prior to 16.7.2 and prior to 17.1
Description The issue is related to improved memory handling. Processing web content may lead to a denial-of-service. The problem is caused by a buffer overflow in WebKitGTK+ and WPE WebKit modules, which can be exploited by a remote attacker to cause a denial of service.
Recommendations For macOS Sonoma versions prior to 14.1, update to macOS Sonoma 14.1. For Safari versions prior to 17.1, update to Safari 17.1. For iOS versions prior to 16.7.2, update to iOS 16.7.2 or later. For iOS versions prior to 17.1, update to iOS 17.1. For iPadOS versions prior to 16.7.2, update to iPadOS 16.7.2 or later. For iPadOS versions prior to 17.1, update to iPadOS 17.1.

Fix

DoS

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2024:2126
ALSA-2024:2982
BDU:2023-08665
CESA-2024_2982
CVE-2023-41983
DSA-5557-1
INFSA-2024_2126
INFSA-2024_2982
OPENSUSE-SU-2023_4561-1
RHSA-2024:2126
RHSA-2024:2982
RHSA-2024_2126
RHSA-2024_2982
RHSA-2025:10364
RLSA-2024:2982
SUSE-SU-2023:4558-1
SUSE-SU-2023:4559-1
SUSE-SU-2023:4561-1
SUSE-SU-2023:4651-1
USN-6490-1

Affected Products

Almalinux
Astra Linux
Centos
Debian
Linuxmint
Apple Macos
Red Hat
Rocky Linux
Safari
Suse
Ubuntu
Ios
Ipados