WebKitGTK和WPE WebKit远程代码执行漏洞

详细信息

漏洞类型

其他

漏洞描述

WebKitGTK和WPE WebKit 2.38.0以前版本存在安全漏洞，该漏洞源于在处理网页时存在任意代码执行漏洞。漏洞同时影响Redhat、Debian、ubuntu等多个发行版本，以及Apple macOS、iOS、tvOS、Safari和watchOS多个版本。

修复建议

将WebKitGTK和WPE WebKit更新到最新稳定版本，参考链接： https://webkitgtk.org/security/WSA-2023-0005.html

参考链接

• https://bugzilla.redhat.com/show_bug.cgi?id=2218623

  Snyk

• https://osv.dev/vulnerability/CVE-2022-48503

  OSV

• https://osv.dev/vulnerability/DEBIAN-CVE-2022-48503

  OSV

• https://osv.dev/vulnerability/DSA-5240-1

  OSV

• https://osv.dev/vulnerability/DSA-5241-1

  OSV

• https://osv.dev/vulnerability/UBUNTU-CVE-2022-48503

  OSV

• https://security-tracker.debian.org/tracker/CVE-2022-48503

  OSV

• https://support.apple.com/en-us/HT213340

  CVE · Release Notes · Vendor Advisory

• https://support.apple.com/en-us/HT213341

  CVE · Release Notes · Vendor Advisory

• https://support.apple.com/en-us/HT213342

  CVE · Release Notes · Vendor Advisory

• https://support.apple.com/en-us/HT213345

  CVE · Release Notes · Vendor Advisory

• https://support.apple.com/en-us/HT213346

  CVE · Release Notes · Vendor Advisory

• https://ubuntu.com/security/CVE-2022-48503

  OSV

• https://webkitgtk.org/security/WSA-2023-0005.html

  Snyk

• https://www.cve.org/CVERecord?id=CVE-2022-48503

  OSV

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog

  OSV

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-48503

  NVD · US Government Resource