Test ID:	1.3.6.1.4.1.25623.1.1.10.2022.0346
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2022-0346)
Summary:	The remote host is missing an update for the 'webkit2' package(s) announced via the MGASA-2022-0346 advisory.
Description:	Summary: The remote host is missing an update for the 'webkit2' package(s) announced via the MGASA-2022-0346 advisory. Vulnerability Insight: A buffer overflow issue which may lead to arbitrary code execution was addressed with improved memory handling. (CVE-2022-32886) Visiting a website that frames malicious content may lead to UI spoofing. he issue was addressed with improved UI handling. (CVE-2022-32891) A buffer overflow issue which may lead to arbitrary code execution was addressed with improved memory handling. (CVE-2022-32912) Affected Software/OS: 'webkit2' package(s) on Mageia 8. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-32886 https://security.gentoo.org/glsa/202305-32 20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13 http://seclists.org/fulldisclosure/2022/Oct/28 20221030 APPLE-SA-2022-10-27-3 Additional information for APPLE-SA-2022-09-12-1 iOS 16 http://seclists.org/fulldisclosure/2022/Oct/39 20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13 http://seclists.org/fulldisclosure/2022/Oct/41 DSA-5240 https://www.debian.org/security/2022/dsa-5240 DSA-5241 https://www.debian.org/security/2022/dsa-5241 FEDORA-2022-0c00617967 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KDV6OLKDTL55NH4LNSMLQ4D6LLSX6JU2/ FEDORA-2022-a77b646471 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/74MXH2U5GA4CX3L3NLYP4TBO4O2VOPBJ/ FEDORA-2022-ece798a8d4 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TDNT32WIARRD2ANWKGCTTIQXI6OII7HZ/ [debian-lts-announce] 20220929 [SECURITY] [DLA 3124-1] webkit2gtk security update https://lists.debian.org/debian-lts-announce/2022/09/msg00034.html https://support.apple.com/en-us/HT213442 https://support.apple.com/en-us/HT213445 https://support.apple.com/en-us/HT213446 Common Vulnerability Exposure (CVE) ID: CVE-2022-32891 https://support.apple.com/en-us/HT213486 https://support.apple.com/en-us/HT213487 Common Vulnerability Exposure (CVE) ID: CVE-2022-32912 http://seclists.org/fulldisclosure/2022/Oct/47 http://seclists.org/fulldisclosure/2022/Oct/49 http://seclists.org/fulldisclosure/2022/Oct/50 http://seclists.org/fulldisclosure/2022/Oct/40
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.