高危
Apple多款产品WebKit内存损坏漏洞
2023-11-30 22:18:50 公开 ，2026-05-06 16:41:25 更新
- CISA KEV
- 关键漏洞
- 远程
- 无需认证
- CWE Top 25 (2023)
- 开源组件漏洞
- CWE Top 25 (2024)
- 公开PoC
- SSVC：
- 可利用状态：已被积极利用攻击自动化：否技术影响评估：全部 2023-12-02 13:00:19
风险信息
- CVSS v3.1 向量
- AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS v3.1 风险值
- 8.8
详细信息
- 漏洞类型
- 其他
- 漏洞描述
- Apple Safari是美国苹果（Apple）公司的一款Web浏览器，是Mac OS X和iOS操作系统附带的默认浏览器。Safari 17.1.2之前版本存在安全漏洞，该漏洞源于存在内存损坏漏洞，可能会导致任意代码执行。
- 修复建议
- 目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://support.apple.com/en-us/HT214033
参考链接
- https://support.apple.com/en-us/HT214033
CVE · Release Notes · Vendor Advisory
- https://support.apple.com/en-us/HT214032
CVE · Release Notes · Vendor Advisory
- https://support.apple.com/en-us/HT214031
CVE · Release Notes · Vendor Advisory
- http://www.openwall.com/lists/oss-security/2023/12/05/1
CVE · Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AD2KIHHCUBQC2YYH3FJWAHI5BG3QETOH/
CVE · Mailing List · Release Notes
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P5LQS6VEI7VIZNC7QGQ62EOV45R5RJIR/
CVE · Mailing List · Release Notes
- https://www.debian.org/security/2023/dsa-5575
CVE · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Dec/4
CVE · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Dec/3
CVE · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Dec/5
CVE · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Dec/8
CVE · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Dec/13
CVE · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Dec/12
CVE · Mailing List · Third Party Advisory
- https://security.gentoo.org/glsa/202401-04
CVE · Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jan/35
CVE · Mailing List · Third Party Advisory
- https://www.bleepingcomputer.com/news/apple/apple-fixes-two-new-ios-zero-days-in-emergency-updates/
Snyk
- https://webkitgtk.org/security/WSA-2023-0011.html
Snyk
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Snyk
- https://security.snyk.io/vuln/SNYK-UNMANAGED-WPEWEBKIT-6102494
- https://security.snyk.io/vuln/SNYK-UNMANAGED-WEBKITGTK-6102493
- https://osv.dev/vulnerability/DSA-5575-1
OSV
- https://access.redhat.com/errata/RHSA-2023:7716
OSV
- https://access.redhat.com/security/cve/CVE-2023-42917
OSV
- https://bugzilla.redhat.com/2253058
OSV
- https://errata.almalinux.org/8/ALSA-2023-7716.html
OSV
- https://osv.dev/vulnerability/ALSA-2023:7716
OSV
- https://access.redhat.com/errata/RHSA-2023:7715
OSV
- https://errata.almalinux.org/9/ALSA-2023-7715.html
OSV
- https://osv.dev/vulnerability/ALSA-2023:7715
OSV
- https://support.apple.com/kb/HT214062
CVE · Vendor Advisory
- https://support.apple.com/kb/HT214034
CVE · Vendor Advisory
- https://support.apple.com/kb/HT214033
CVE · Vendor Advisory
- https://osv.dev/vulnerability/CVE-2023-42917
OSV
- https://security-tracker.debian.org/tracker/CVE-2023-42917
OSV
- https://ubuntu.com/security/CVE-2023-42917
OSV
- https://ubuntu.com/security/notices/USN-6545-1
OSV
- https://www.cve.org/CVERecord?id=CVE-2023-42917
OSV
- https://osv.dev/vulnerability/UBUNTU-CVE-2023-42917
OSV
- https://osv.dev/vulnerability/DEBIAN-CVE-2023-42917
OSV
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-42917
OSV · US Government Resource
- https://nvd.nist.gov/vuln/detail/CVE-2023-42917
OSV
- https://openjdk.org/groups/vulnerability/advisories/2024-04-16
OSV
- https://osv.dev/vulnerability/BIT-java-2023-42917
OSV
- https://osv.dev/vulnerability/BIT-java-min-2023-42917
OSV