CVE-2024-44185
Medium · 5.5CVSS
5.5
EPSS
0.3%
Published
Oct 24, 2024
CISA due date
—
Cloudanix analysis
A flaw in how certain software handles specially made web pages can cause the program to crash unexpectedly until systems are updated.
- Exploitation
- Requires User Interaction
- Attacker needs
- User Interaction
- Complexity
- Low
- Impact
- Denial Of Service
- Component
- Application
- Class
- Improper Input Validation
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Insufficient input validation when processing web content allows maliciously crafted data to trigger an unexpected process crash.
Why it matters to the business
Denial-of-service crashes affecting users on legacy Ubuntu systems running spice packages, with potential minor operational disruption but low likelihood of widespread exploitation given stable EPSS and absence from KEV.
How an attack unfolds
An attacker prepares malicious web content exploiting the validation flaw and delivers it via a web page or link; when a victim processes the content in an affected application, the process terminates unexpectedly. Threat actors associated with 2024 Zero-Day Exploitation Campaigns and Apple WebKit-related campaigns have been observed targeting similar issues in the ecosystem.
How to fix it
Upgrade spice on Ubuntu 14.04 LTS to 0.12.4-0nocelt2ubuntu1.2 and on Ubuntu 16.04 LTS to 0.12.5-1.1ubuntu2. Apply the corresponding fixed versions across all affected packages and verify post-update.
How to confirm the fix worked
Confirm installed package versions match or exceed the listed fixed releases using package managers; test rendering of known-good and edge-case web content to ensure no crashes occur.
Typical attack path
- Craft malicious web content targeting the input validation weakness
- Host or deliver the content through a web server or phishing link
- Victim opens or renders the content in an affected browser or application
- Process crashes due to unhandled malformed input
How to detect it
Review application and system crash logs for unexpected terminations during web content processing; correlate with web request logs from the period of exposure. Threat actor campaigns listed have historically left crash artifacts in similar Apple and related software environments.
What your security team should do
- Prioritize patching legacy Ubuntu spice deployments within standard change windows due to the published remediation deadline context
- Monitor EPSS trend stability and re-evaluate if new exploit maturity emerges
- Update inventory to remove or isolate unsupported spice instances
The record
The issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously crafted web content may lead to an unexpected process crash.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | webkit2gtk3 | 0 | 2.46.3-1.el8_10 |
| AlmaLinux:8 | webkit2gtk3-devel | 0 | 2.46.3-1.el8_10 |
| AlmaLinux:8 | webkit2gtk3-jsc | 0 | 2.46.3-1.el8_10 |
| AlmaLinux:8 | webkit2gtk3-jsc-devel | 0 | 2.46.3-1.el8_10 |
| AlmaLinux:9 | webkit2gtk3 | 0 | 2.46.3-1.el9_5 |
| AlmaLinux:9 | webkit2gtk3-devel | 0 | 2.46.3-1.el9_5 |
| AlmaLinux:9 | webkit2gtk3-jsc | 0 | 2.46.3-1.el9_5 |
| AlmaLinux:9 | webkit2gtk3-jsc-devel | 0 | 2.46.3-1.el9_5 |
| Debian:11 | webkit2gtk | 0 | No fix |
| Debian:11 | webkit2gtk | 0 | 2.46.3-1~deb11u2 |
| Debian:11 | wpewebkit | 0 | No fix |
| Debian:12 | webkit2gtk | 0 | 2.46.0-2~deb12u1 |
| Debian:12 | wpewebkit | 0 | No fix |
| Debian:13 | webkit2gtk | 0 | 2.46.0-1 |
| Debian:13 | wpewebkit | 0 | 2.46.1-1 |
| Debian:14 | webkit2gtk | 0 | 2.46.0-1 |
| Debian:14 | wpewebkit | 0 | 2.46.1-1 |
| Mageia:9 | webkit2 | 0 | 2.50.1-1.2.mga9 |
| Red Hat:enterprise_linux:8::appstream | webkit2gtk3 | 0 | 0:2.46.3-1.el8_10 |
| Red Hat:enterprise_linux:8::appstream | webkit2gtk3-debuginfo | 0 | 0:2.46.3-1.el8_10 |
| Red Hat:enterprise_linux:8::appstream | webkit2gtk3-debugsource | 0 | 0:2.46.3-1.el8_10 |
| Red Hat:enterprise_linux:8::appstream | webkit2gtk3-devel | 0 | 0:2.46.3-1.el8_10 |
| Red Hat:enterprise_linux:8::appstream | webkit2gtk3-devel-debuginfo | 0 | 0:2.46.3-1.el8_10 |
| Red Hat:enterprise_linux:8::appstream | webkit2gtk3-jsc | 0 | 0:2.46.3-1.el8_10 |
| Red Hat:enterprise_linux:8::appstream | webkit2gtk3-jsc-debuginfo | 0 | 0:2.46.3-1.el8_10 |
| Red Hat:enterprise_linux:8::appstream | webkit2gtk3-jsc-devel | 0 | 0:2.46.3-1.el8_10 |
| Red Hat:enterprise_linux:8::appstream | webkit2gtk3-jsc-devel-debuginfo | 0 | 0:2.46.3-1.el8_10 |
| Red Hat:enterprise_linux:9::appstream | webkit2gtk3 | 0 | 0:2.46.1-2.el9_4 |
| Red Hat:enterprise_linux:9::appstream | webkit2gtk3 | 0 | 0:2.46.3-1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | webkit2gtk3-debuginfo | 0 | 0:2.46.1-2.el9_4 |
| Red Hat:enterprise_linux:9::appstream | webkit2gtk3-debuginfo | 0 | 0:2.46.3-1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | webkit2gtk3-debugsource | 0 | 0:2.46.1-2.el9_4 |
| Red Hat:enterprise_linux:9::appstream | webkit2gtk3-debugsource | 0 | 0:2.46.3-1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | webkit2gtk3-devel | 0 | 0:2.46.1-2.el9_4 |
| Red Hat:enterprise_linux:9::appstream | webkit2gtk3-devel | 0 | 0:2.46.3-1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | webkit2gtk3-devel-debuginfo | 0 | 0:2.46.1-2.el9_4 |
| Red Hat:enterprise_linux:9::appstream | webkit2gtk3-devel-debuginfo | 0 | 0:2.46.3-1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | webkit2gtk3-jsc | 0 | 0:2.46.1-2.el9_4 |
| Red Hat:enterprise_linux:9::appstream | webkit2gtk3-jsc | 0 | 0:2.46.3-1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | webkit2gtk3-jsc-debuginfo | 0 | 0:2.46.1-2.el9_4 |
| Red Hat:enterprise_linux:9::appstream | webkit2gtk3-jsc-debuginfo | 0 | 0:2.46.3-1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | webkit2gtk3-jsc-devel | 0 | 0:2.46.1-2.el9_4 |
| Red Hat:enterprise_linux:9::appstream | webkit2gtk3-jsc-devel | 0 | 0:2.46.3-1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | webkit2gtk3-jsc-devel-debuginfo | 0 | 0:2.46.1-2.el9_4 |
| Red Hat:enterprise_linux:9::appstream | webkit2gtk3-jsc-devel-debuginfo | 0 | 0:2.46.3-1.el9_5 |
| Red Hat:rhel_aus:8.2::appstream | webkit2gtk3 | 0 | 0:2.46.3-1.el8_2 |
| Red Hat:rhel_aus:8.2::appstream | webkit2gtk3-debuginfo | 0 | 0:2.46.3-1.el8_2 |
| Red Hat:rhel_aus:8.2::appstream | webkit2gtk3-debugsource | 0 | 0:2.46.3-1.el8_2 |
| Red Hat:rhel_aus:8.2::appstream | webkit2gtk3-devel | 0 | 0:2.46.3-1.el8_2 |
| Red Hat:rhel_aus:8.2::appstream | webkit2gtk3-devel-debuginfo | 0 | 0:2.46.3-1.el8_2 |
| Red Hat:rhel_aus:8.2::appstream | webkit2gtk3-jsc | 0 | 0:2.46.3-1.el8_2 |
| Red Hat:rhel_aus:8.2::appstream | webkit2gtk3-jsc-debuginfo | 0 | 0:2.46.3-1.el8_2 |
| Red Hat:rhel_aus:8.2::appstream | webkit2gtk3-jsc-devel | 0 | 0:2.46.3-1.el8_2 |
| Red Hat:rhel_aus:8.2::appstream | webkit2gtk3-jsc-devel-debuginfo | 0 | 0:2.46.3-1.el8_2 |
| Red Hat:rhel_aus:8.4::appstream | webkit2gtk3 | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_aus:8.4::appstream | webkit2gtk3-debuginfo | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_aus:8.4::appstream | webkit2gtk3-debugsource | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_aus:8.4::appstream | webkit2gtk3-devel | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_aus:8.4::appstream | webkit2gtk3-devel-debuginfo | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_aus:8.4::appstream | webkit2gtk3-jsc | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_aus:8.4::appstream | webkit2gtk3-jsc-debuginfo | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_aus:8.4::appstream | webkit2gtk3-jsc-devel | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_aus:8.4::appstream | webkit2gtk3-jsc-devel-debuginfo | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_aus:8.6::appstream | webkit2gtk3 | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_aus:8.6::appstream | webkit2gtk3-debuginfo | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_aus:8.6::appstream | webkit2gtk3-debugsource | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_aus:8.6::appstream | webkit2gtk3-devel | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_aus:8.6::appstream | webkit2gtk3-devel-debuginfo | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_aus:8.6::appstream | webkit2gtk3-jsc | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_aus:8.6::appstream | webkit2gtk3-jsc-debuginfo | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_aus:8.6::appstream | webkit2gtk3-jsc-devel | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_aus:8.6::appstream | webkit2gtk3-jsc-devel-debuginfo | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_e4s:8.4::appstream | webkit2gtk3 | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_e4s:8.4::appstream | webkit2gtk3-debuginfo | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_e4s:8.4::appstream | webkit2gtk3-debugsource | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_e4s:8.4::appstream | webkit2gtk3-devel | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_e4s:8.4::appstream | webkit2gtk3-devel-debuginfo | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_e4s:8.4::appstream | webkit2gtk3-jsc | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_e4s:8.4::appstream | webkit2gtk3-jsc-debuginfo | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_e4s:8.4::appstream | webkit2gtk3-jsc-devel | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_e4s:8.4::appstream | webkit2gtk3-jsc-devel-debuginfo | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_e4s:8.6::appstream | webkit2gtk3 | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_e4s:8.6::appstream | webkit2gtk3-debuginfo | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_e4s:8.6::appstream | webkit2gtk3-debugsource | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_e4s:8.6::appstream | webkit2gtk3-devel | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_e4s:8.6::appstream | webkit2gtk3-devel-debuginfo | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_e4s:8.6::appstream | webkit2gtk3-jsc | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_e4s:8.6::appstream | webkit2gtk3-jsc-debuginfo | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_e4s:8.6::appstream | webkit2gtk3-jsc-devel | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_e4s:8.6::appstream | webkit2gtk3-jsc-devel-debuginfo | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_e4s:9.0::appstream | webkit2gtk3 | 0 | 0:2.46.3-1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | webkit2gtk3-debuginfo | 0 | 0:2.46.3-1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | webkit2gtk3-debugsource | 0 | 0:2.46.3-1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | webkit2gtk3-devel | 0 | 0:2.46.3-1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | webkit2gtk3-devel-debuginfo | 0 | 0:2.46.3-1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | webkit2gtk3-jsc | 0 | 0:2.46.3-1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | webkit2gtk3-jsc-debuginfo | 0 | 0:2.46.3-1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | webkit2gtk3-jsc-devel | 0 | 0:2.46.3-1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | webkit2gtk3-jsc-devel-debuginfo | 0 | 0:2.46.3-1.el9_0 |
| Red Hat:rhel_eus:8.8::appstream | webkit2gtk3 | 0 | 0:2.46.3-1.el8_8 |
| Red Hat:rhel_eus:8.8::appstream | webkit2gtk3-debuginfo | 0 | 0:2.46.3-1.el8_8 |
| Red Hat:rhel_eus:8.8::appstream | webkit2gtk3-debugsource | 0 | 0:2.46.3-1.el8_8 |
| Red Hat:rhel_eus:8.8::appstream | webkit2gtk3-devel | 0 | 0:2.46.3-1.el8_8 |
| Red Hat:rhel_eus:8.8::appstream | webkit2gtk3-devel-debuginfo | 0 | 0:2.46.3-1.el8_8 |
| Red Hat:rhel_eus:8.8::appstream | webkit2gtk3-jsc | 0 | 0:2.46.3-1.el8_8 |
| Red Hat:rhel_eus:8.8::appstream | webkit2gtk3-jsc-debuginfo | 0 | 0:2.46.3-1.el8_8 |
| Red Hat:rhel_eus:8.8::appstream | webkit2gtk3-jsc-devel | 0 | 0:2.46.3-1.el8_8 |
| Red Hat:rhel_eus:8.8::appstream | webkit2gtk3-jsc-devel-debuginfo | 0 | 0:2.46.3-1.el8_8 |
| Red Hat:rhel_eus:9.2::appstream | webkit2gtk3 | 0 | 0:2.46.3-1.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | webkit2gtk3-debuginfo | 0 | 0:2.46.3-1.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | webkit2gtk3-debugsource | 0 | 0:2.46.3-1.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | webkit2gtk3-devel | 0 | 0:2.46.3-1.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | webkit2gtk3-devel-debuginfo | 0 | 0:2.46.3-1.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | webkit2gtk3-jsc | 0 | 0:2.46.3-1.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | webkit2gtk3-jsc-debuginfo | 0 | 0:2.46.3-1.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | webkit2gtk3-jsc-devel | 0 | 0:2.46.3-1.el9_2 |
| Red Hat:rhel_eus:9.2::appstream | webkit2gtk3-jsc-devel-debuginfo | 0 | 0:2.46.3-1.el9_2 |
| Red Hat:rhel_tus:8.4::appstream | webkit2gtk3 | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_tus:8.4::appstream | webkit2gtk3-debuginfo | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_tus:8.4::appstream | webkit2gtk3-debugsource | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_tus:8.4::appstream | webkit2gtk3-devel | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_tus:8.4::appstream | webkit2gtk3-devel-debuginfo | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_tus:8.4::appstream | webkit2gtk3-jsc | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_tus:8.4::appstream | webkit2gtk3-jsc-debuginfo | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_tus:8.4::appstream | webkit2gtk3-jsc-devel | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_tus:8.4::appstream | webkit2gtk3-jsc-devel-debuginfo | 0 | 0:2.46.3-1.el8_4 |
| Red Hat:rhel_tus:8.6::appstream | webkit2gtk3 | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_tus:8.6::appstream | webkit2gtk3-debuginfo | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_tus:8.6::appstream | webkit2gtk3-debugsource | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_tus:8.6::appstream | webkit2gtk3-devel | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_tus:8.6::appstream | webkit2gtk3-devel-debuginfo | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_tus:8.6::appstream | webkit2gtk3-jsc | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_tus:8.6::appstream | webkit2gtk3-jsc-debuginfo | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_tus:8.6::appstream | webkit2gtk3-jsc-devel | 0 | 0:2.46.3-1.el8_6 |
| Red Hat:rhel_tus:8.6::appstream | webkit2gtk3-jsc-devel-debuginfo | 0 | 0:2.46.3-1.el8_6 |
| Rocky Linux:8 | webkit2gtk3 | 0 | 0:2.46.3-1.el8_10 |
| SUSE:Enterprise Storage 7.1 | webkit2gtk3 | 0 | 2.46.3-150200.127.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | webkit2gtk3 | 0 | 2.46.3-150200.127.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | webkit2gtk3 | 0 | 2.46.3-150200.127.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | webkit2gtk3 | 0 | 2.46.3-150400.4.97.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | webkit2gtk3 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | webkit2gtk3-soup2 | 0 | 2.46.3-150400.4.97.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | webkit2gtk3-soup2 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | webkit2gtk4 | 0 | 2.46.3-150400.4.97.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | webkit2gtk4 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | webkit2gtk3 | 0 | 2.46.3-150400.4.97.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | webkit2gtk3 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | webkit2gtk3-soup2 | 0 | 2.46.3-150400.4.97.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | webkit2gtk3-soup2 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | webkit2gtk4 | 0 | 2.46.3-150400.4.97.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | webkit2gtk4 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | webkit2gtk3 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | webkit2gtk3-soup2 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | webkit2gtk4 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | webkit2gtk3 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | webkit2gtk3-soup2 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | webkit2gtk4 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP5 | webkit2gtk3-soup2 | 0 | 2.46.3-150400.4.97.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | webkit2gtk3-soup2 | 0 | 2.46.5-150600.12.24.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | webkit2gtk3-soup2 | 0 | 2.46.3-150600.12.16.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | webkit2gtk4 | 0 | 2.46.5-150600.12.24.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | webkit2gtk4 | 0 | 2.46.3-150600.12.16.1 |
| SUSE:Linux Enterprise Module for Desktop Applications 15 SP5 | webkit2gtk3 | 0 | 2.46.3-150400.4.97.1 |
| SUSE:Linux Enterprise Module for Desktop Applications 15 SP6 | webkit2gtk3 | 0 | 2.46.5-150600.12.24.1 |
| SUSE:Linux Enterprise Module for Desktop Applications 15 SP6 | webkit2gtk3 | 0 | 2.46.3-150600.12.16.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP5 | webkit2gtk4 | 0 | 2.46.3-150400.4.97.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP6 | webkit2gtk4 | 0 | 2.46.5-150600.12.24.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP6 | webkit2gtk4 | 0 | 2.46.3-150600.12.16.1 |
| SUSE:Linux Enterprise Server 12 SP5-LTSS | webkit2gtk3 | 0 | 2.46.5-4.25.1 |
| SUSE:Linux Enterprise Server 15 SP2-LTSS | webkit2gtk3 | 0 | 2.46.3-150200.127.1 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | webkit2gtk3 | 0 | 2.46.3-150200.127.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | webkit2gtk3 | 0 | 2.46.3-150400.4.97.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | webkit2gtk3 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | webkit2gtk3-soup2 | 0 | 2.46.3-150400.4.97.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | webkit2gtk3-soup2 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | webkit2gtk4 | 0 | 2.46.3-150400.4.97.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | webkit2gtk4 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | webkit2gtk3 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | webkit2gtk3-soup2 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | webkit2gtk4 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | webkit2gtk3 | 0 | 2.46.5-4.25.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP2 | webkit2gtk3 | 0 | 2.46.3-150200.127.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | webkit2gtk3 | 0 | 2.46.3-150200.127.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | webkit2gtk3 | 0 | 2.46.3-150400.4.97.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | webkit2gtk3 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | webkit2gtk3-soup2 | 0 | 2.46.3-150400.4.97.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | webkit2gtk3-soup2 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | webkit2gtk4 | 0 | 2.46.3-150400.4.97.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | webkit2gtk4 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | webkit2gtk3 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | webkit2gtk3-soup2 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | webkit2gtk4 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Manager Proxy 4.3 | webkit2gtk3-soup2 | 0 | 2.46.3-150400.4.97.1 |
| SUSE:Manager Proxy 4.3 | webkit2gtk3-soup2 | 0 | 2.46.5-150400.4.103.1 |
| SUSE:Manager Server 4.3 | webkit2gtk3-soup2 | 0 | 2.46.3-150400.4.97.1 |
| SUSE:Manager Server 4.3 | webkit2gtk3-soup2 | 0 | 2.46.5-150400.4.103.1 |
| Ubuntu:16.04:LTS | qtwebkit-opensource-src | 0 | No fix |
| Ubuntu:16.04:LTS | qtwebkit-source | 0 | No fix |
| Ubuntu:16.04:LTS | webkit2gtk | 0 | No fix |
| Ubuntu:16.04:LTS | webkitgtk | 0 | No fix |
Related vulnerabilities
- CVE-2025-43536 A use-after-free issue was addressed with improved memory management. Also affects webkit2gtk3
- CVE-2025-43531 A race condition was addressed with improved state handling. Also affects webkit2gtk3
- CVE-2025-43529 A use-after-free issue was addressed with improved memory management. Also affects webkit2gtk3
- CVE-2023-43000 A use-after-free issue was addressed with improved memory management. Also affects webkit2gtk3
- CVE-2025-43480 The issue was addressed with improved checks. Also affects webkit2gtk3
- CVE-2025-43458 This issue was addressed through improved state management. Also affects webkit2gtk3
- CVE-2025-43443 This issue was addressed with improved checks. Also affects webkit2gtk3
- CVE-2025-43432 A use-after-free issue was addressed with improved memory management. Also affects webkit2gtk3