CVE-2023-2203

Katalog CVE

CVSS 8.8 · High EPSS 0,93%

Kerentanan Use After Free pada webkitgtk webkit2gtk3, redhat enterprise linux +3 lainnya. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free vulnerability. This flaw allows attackers with network access to pass specially crafted web content files, causing a denial of service or arbitrary code execution. This CVE exists because of a CVE-2023-28205 security regression for the WebKitGTK package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.

Rincian

Terbit di NVD

17 Mei 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

0,93% peluang dieksploitasi; lebih tinggi dari 59,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/errata/RHSA-2023:2653 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:3108 advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2023-2203 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2188543 issue tracking · advisory pihak ketiga