REDHAT-BUG-2238945: Medium severity WebKit WebKitGTK vulnerability

Q: What is the severity of REDHAT-BUG-2238945?

The severity of REDHAT-BUG-2238945 is significant due to the potential for arbitrary JavaScript code execution by a remote attacker.

Q: How do I fix REDHAT-BUG-2238945?

You can fix REDHAT-BUG-2238945 by updating WebKitGTK and WPE WebKit to version 2.40.5 or later.

Q: What versions are affected by REDHAT-BUG-2238945?

Versions affected by REDHAT-BUG-2238945 include WebKitGTK and WPE WebKit prior to 2.40.5.

Q: What kind of attack is possible with REDHAT-BUG-2238945?

A remote attacker may exploit REDHAT-BUG-2238945 to execute arbitrary JavaScript code on the victim's system.

Q: Who reported REDHAT-BUG-2238945?

REDHAT-BUG-2238945 was reported by Johan Carlsson.

Published Sep 14, 2023

Updated

Versions affected: WebKitGTK and WPE WebKit before 2.40.5. Credit to Johan Carlsson (joaxcar). Impact: A remote attacker may be able to cause arbitrary javascript code execution. Description: The issue was addressed with improved checks.

Affected Software

2 affected components

WebKit WebKitGTK<2.40.5

WebKit WPE WebKit<2.40.5

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WebKitGTK and WPE WebKit to a version that resolves this vulnerability.
Fixed in 2.40.5

Event History

Sep 14, 2023

Data Sourced

via Red Hat·02:02 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2238945?

The severity of REDHAT-BUG-2238945 is significant due to the potential for arbitrary JavaScript code execution by a remote attacker.

How do I fix REDHAT-BUG-2238945?