Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.1.10.2019.0324
Kategorie:Mageia Linux Local Security Checks
Titel:Mageia: Security Advisory (MGASA-2019-0324)
Zusammenfassung:The remote host is missing an update for the 'webkit2' package(s) announced via the MGASA-2019-0324 advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'webkit2' package(s) announced via the MGASA-2019-0324 advisory.

Vulnerability Insight:
Updated webkit2 packages fix security vulnerabilities:

Processing maliciously crafted web content may lead to universal cross
site scripting (CVE-2019-8625, CVE-2019-8674, CVE-2019-8719, CVE-2019-8813)

Processing maliciously crafted web content may lead to arbitrary code
execution (CVE-2019-8707, CVE-2019-8710, CVE-2019-8720, CVE-2019-8726,
CVE-2019-8733, CVE-2019-8735, CVE-2019-8743, CVE-2019-8763, CVE-2019-8764,
CVE-2019-8765, CVE-2019-8766, CVE-2019-8782, CVE-2019-8783, CVE-2019-8808,
CVE-2019-8811, CVE-2019-8812, CVE-2019-8814, CVE-2019-8815, CVE-2019-8816,
CVE-2019-8819, CVE-2019-8820, CVE-2019-8821, CVE-2019-8822, CVE-2019-8823)

A user may be unable to delete browsing history items (CVE-2019-8768)

Visiting a maliciously crafted website may reveal browsing history
(CVE-2019-8769)

Maliciously crafted web content may violate iframe sandboxing policy
(CVE-2019-8771)

Affected Software/OS:
'webkit2' package(s) on Mageia 7.

Solution:
Please install the updated package(s).

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2019-8625
https://security.gentoo.org/glsa/202003-22
https://support.apple.com/HT210635
https://support.apple.com/HT210636
https://support.apple.com/HT210637
Common Vulnerability Exposure (CVE) ID: CVE-2019-8674
https://support.apple.com/HT210606
https://support.apple.com/HT210608
Common Vulnerability Exposure (CVE) ID: CVE-2019-8707
Common Vulnerability Exposure (CVE) ID: CVE-2019-8710
https://support.apple.com/HT210727
Common Vulnerability Exposure (CVE) ID: CVE-2019-8719
Common Vulnerability Exposure (CVE) ID: CVE-2019-8720
https://bugzilla.redhat.com/show_bug.cgi?id=1876611
https://webkitgtk.org/security/WSA-2019-0005.html
Common Vulnerability Exposure (CVE) ID: CVE-2019-8726
Common Vulnerability Exposure (CVE) ID: CVE-2019-8733
Common Vulnerability Exposure (CVE) ID: CVE-2019-8735
Common Vulnerability Exposure (CVE) ID: CVE-2019-8743
https://support.apple.com/HT210724
Common Vulnerability Exposure (CVE) ID: CVE-2019-8763
Common Vulnerability Exposure (CVE) ID: CVE-2019-8764
Common Vulnerability Exposure (CVE) ID: CVE-2019-8765
Common Vulnerability Exposure (CVE) ID: CVE-2019-8766
Common Vulnerability Exposure (CVE) ID: CVE-2019-8768
https://support.apple.com/HT210634
Common Vulnerability Exposure (CVE) ID: CVE-2019-8769
Common Vulnerability Exposure (CVE) ID: CVE-2019-8771
https://support.apple.com/en-us/HT210605
https://support.apple.com/en-us/HT210606
Common Vulnerability Exposure (CVE) ID: CVE-2019-8782
https://support.apple.com/HT210721
https://support.apple.com/HT210723
https://support.apple.com/HT210725
https://support.apple.com/HT210726
Common Vulnerability Exposure (CVE) ID: CVE-2019-8783
https://support.apple.com/HT210728
Common Vulnerability Exposure (CVE) ID: CVE-2019-8808
Common Vulnerability Exposure (CVE) ID: CVE-2019-8811
Common Vulnerability Exposure (CVE) ID: CVE-2019-8812
Common Vulnerability Exposure (CVE) ID: CVE-2019-8813
Common Vulnerability Exposure (CVE) ID: CVE-2019-8814
Common Vulnerability Exposure (CVE) ID: CVE-2019-8815
Common Vulnerability Exposure (CVE) ID: CVE-2019-8816
Common Vulnerability Exposure (CVE) ID: CVE-2019-8819
Common Vulnerability Exposure (CVE) ID: CVE-2019-8820
Common Vulnerability Exposure (CVE) ID: CVE-2019-8821
Common Vulnerability Exposure (CVE) ID: CVE-2019-8822
Common Vulnerability Exposure (CVE) ID: CVE-2019-8823
CopyrightCopyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.