CVE-2023-42833 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	8.8 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 74%

Affected Products (NVD)

Vendor	Product	Version
apple	safari	𝑥 < 17.0
apple	ipados	𝑥 < 17.0
apple	iphone_os	𝑥 < 17.0
apple	macos	𝑥 < 14.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

webkit2gtk

bookworm	2.46.0-2~deb12u1 fixed
bookworm (security)	2.46.5-1~deb12u1 fixed
bullseye	2.44.2-1~deb11u1 fixed
bullseye (security)	2.46.4-1~deb11u1 fixed
sid	2.46.5-1 fixed
trixie	2.46.5-1 fixed

wpewebkit

bookworm	2.38.6-1 fixed
bullseye	2.38.6-1~deb11u1 fixed
bullseye (security)	2.38.6-1~deb11u1 fixed
sid	2.46.5-1 fixed
trixie	2.46.5-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

qtwebkit-opensource-src

bionic	ignored
focal	ignored
jammy	ignored
noble	ignored
oracular	ignored
xenial	ignored

qtwebkit-source

bionic	ignored
focal	dne
jammy	dne
noble	dne
oracular	dne
xenial	ignored

webkit2gtk

bionic	ignored
focal	ignored
jammy	Fixed 2.38.2-0ubuntu0.22.04.2 released
noble	not-affected
oracular	not-affected
xenial	ignored

webkitgtk

bionic	ignored
focal	dne
jammy	dne
noble	dne
oracular	dne
xenial	ignored

wpewebkit

focal	needs-triage
jammy	needs-triage
noble	dne
oracular	dne

openSUSE / SLES Releases

openSUSE Product

Release

libjavascriptcoregtk-4_0-18

suse enterprise desktop 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise desktop 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise desktop 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise sap 15 SP2	2.42.5-150200.104.1 fixed
suse enterprise sap 15 SP3	2.42.5-150200.104.1 fixed
suse enterprise sap 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise sap 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise sap 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise server 12 SP3	2.42.5-2.168.2 fixed
suse enterprise server 15 SP2	2.42.5-150200.104.1 fixed
suse enterprise server 15 SP3	2.42.5-150200.104.1 fixed
suse enterprise server 15 SP4	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise server 15 SP7	2.48.1-150600.12.36.5 fixed

libjavascriptcoregtk-4_0-18-32bit

suse enterprise sap 12 SP5	2.42.5-2.168.2 fixed
suse enterprise server 12 SP5	2.42.5-2.168.2 fixed
suse enterprise workstation 12 SP5	2.42.5-2.168.2 fixed

libjavascriptcoregtk-4_1-0

suse enterprise desktop 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise desktop 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise desktop 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise sap 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise sap 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise sap 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise server 15 SP4	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise server 15 SP7	2.48.1-150600.12.36.5 fixed

libjavascriptcoregtk-6_0-1

suse enterprise desktop 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise desktop 15 SP6	2.42.5-150600.10.36 fixed
suse enterprise desktop 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise sap 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise sap 15 SP6	2.42.5-150600.10.36 fixed
suse enterprise sap 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise server 15 SP4	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP6	2.42.5-150600.10.36 fixed
suse enterprise server 15 SP7	2.48.1-150600.12.36.5 fixed

libwebkit2gtk-4_0-37

suse enterprise desktop 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise desktop 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise desktop 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise sap 15 SP2	2.42.5-150200.104.1 fixed
suse enterprise sap 15 SP3	2.42.5-150200.104.1 fixed
suse enterprise sap 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise sap 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise sap 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise server 12 SP3	2.42.5-2.168.2 fixed
suse enterprise server 15 SP2	2.42.5-150200.104.1 fixed
suse enterprise server 15 SP3	2.42.5-150200.104.1 fixed
suse enterprise server 15 SP4	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise server 15 SP7	2.48.1-150600.12.36.5 fixed

libwebkit2gtk-4_1-0

suse enterprise desktop 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise desktop 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise desktop 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise sap 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise sap 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise sap 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise server 15 SP4	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise server 15 SP7	2.48.1-150600.12.36.5 fixed

libwebkit2gtk3-lang

suse enterprise sap 15 SP2	2.42.5-150200.104.1 fixed
suse enterprise sap 15 SP3	2.42.5-150200.104.1 fixed
suse enterprise server 12 SP3	2.42.5-2.168.2 fixed
suse enterprise server 15 SP2	2.42.5-150200.104.1 fixed
suse enterprise server 15 SP3	2.42.5-150200.104.1 fixed

libwebkitgtk-6_0-4

suse enterprise desktop 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise desktop 15 SP6	2.42.5-150600.10.36 fixed
suse enterprise desktop 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise sap 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise sap 15 SP6	2.42.5-150600.10.36 fixed
suse enterprise sap 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise server 15 SP4	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP6	2.42.5-150600.10.36 fixed
suse enterprise server 15 SP7	2.48.1-150600.12.36.5 fixed

typelib-1_0-JavaScriptCore-4_0

suse enterprise desktop 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise desktop 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise desktop 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise sap 15 SP2	2.42.5-150200.104.1 fixed
suse enterprise sap 15 SP3	2.42.5-150200.104.1 fixed
suse enterprise sap 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise sap 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise sap 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise server 12 SP3	2.42.5-2.168.2 fixed
suse enterprise server 15 SP2	2.42.5-150200.104.1 fixed
suse enterprise server 15 SP3	2.42.5-150200.104.1 fixed
suse enterprise server 15 SP4	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise server 15 SP7	2.48.1-150600.12.36.5 fixed

typelib-1_0-JavaScriptCore-4_1

suse enterprise desktop 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise desktop 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise desktop 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise sap 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise sap 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise sap 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise server 15 SP4	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise server 15 SP7	2.48.1-150600.12.36.5 fixed

typelib-1_0-JavaScriptCore-6_0

suse enterprise desktop 15 SP6	2.42.5-150600.10.36 fixed
suse enterprise desktop 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise sap 15 SP6	2.42.5-150600.10.36 fixed
suse enterprise sap 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise server 15 SP6	2.42.5-150600.10.36 fixed
suse enterprise server 15 SP7	2.48.1-150600.12.36.5 fixed

typelib-1_0-WebKit-6_0

suse enterprise desktop 15 SP6	2.42.5-150600.10.36 fixed
suse enterprise desktop 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise sap 15 SP6	2.42.5-150600.10.36 fixed
suse enterprise sap 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise server 15 SP6	2.42.5-150600.10.36 fixed
suse enterprise server 15 SP7	2.48.1-150600.12.36.5 fixed

typelib-1_0-WebKit2-4_0

suse enterprise desktop 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise desktop 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise desktop 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise sap 15 SP2	2.42.5-150200.104.1 fixed
suse enterprise sap 15 SP3	2.42.5-150200.104.1 fixed
suse enterprise sap 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise sap 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise sap 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise server 12 SP3	2.42.5-2.168.2 fixed
suse enterprise server 15 SP2	2.42.5-150200.104.1 fixed
suse enterprise server 15 SP3	2.42.5-150200.104.1 fixed
suse enterprise server 15 SP4	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise server 15 SP7	2.48.1-150600.12.36.5 fixed

typelib-1_0-WebKit2-4_1

suse enterprise desktop 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise desktop 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise desktop 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise sap 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise sap 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise sap 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise server 15 SP4	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise server 15 SP7	2.48.1-150600.12.36.5 fixed

typelib-1_0-WebKit2WebExtension-4_0

suse enterprise desktop 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise desktop 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise desktop 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise sap 15 SP2	2.42.5-150200.104.1 fixed
suse enterprise sap 15 SP3	2.42.5-150200.104.1 fixed
suse enterprise sap 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise sap 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise sap 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise server 12 SP3	2.42.5-2.168.2 fixed
suse enterprise server 15 SP2	2.42.5-150200.104.1 fixed
suse enterprise server 15 SP3	2.42.5-150200.104.1 fixed
suse enterprise server 15 SP4	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise server 15 SP7	2.48.1-150600.12.36.5 fixed

typelib-1_0-WebKit2WebExtension-4_1

suse enterprise desktop 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise desktop 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise desktop 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise sap 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise sap 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise sap 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise server 15 SP4	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise server 15 SP7	2.48.1-150600.12.36.5 fixed

typelib-1_0-WebKitWebProcessExtension-6_0

suse enterprise desktop 15 SP6	2.42.5-150600.10.36 fixed
suse enterprise desktop 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise sap 15 SP6	2.42.5-150600.10.36 fixed
suse enterprise sap 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise server 15 SP6	2.42.5-150600.10.36 fixed
suse enterprise server 15 SP7	2.48.1-150600.12.36.5 fixed

webkit2gtk-4_0-injected-bundles

suse enterprise desktop 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise desktop 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise desktop 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise sap 15 SP2	2.42.5-150200.104.1 fixed
suse enterprise sap 15 SP3	2.42.5-150200.104.1 fixed
suse enterprise sap 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise sap 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise sap 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise server 12 SP3	2.42.5-2.168.2 fixed
suse enterprise server 15 SP2	2.42.5-150200.104.1 fixed
suse enterprise server 15 SP3	2.42.5-150200.104.1 fixed
suse enterprise server 15 SP4	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise server 15 SP7	2.48.1-150600.12.36.5 fixed

webkit2gtk-4_1-injected-bundles

suse enterprise desktop 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise desktop 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise desktop 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise sap 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise sap 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise sap 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise server 15 SP4	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise server 15 SP7	2.48.1-150600.12.36.5 fixed

webkit2gtk3-devel

suse enterprise desktop 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise desktop 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise desktop 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise sap 15 SP2	2.42.5-150200.104.1 fixed
suse enterprise sap 15 SP3	2.42.5-150200.104.1 fixed
suse enterprise sap 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise sap 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise sap 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise server 15 SP2	2.42.5-150200.104.1 fixed
suse enterprise server 15 SP3	2.42.5-150200.104.1 fixed
suse enterprise server 15 SP4	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise server 15 SP7	2.48.1-150600.12.36.5 fixed

webkit2gtk3-soup2-devel

suse enterprise desktop 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise desktop 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise desktop 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise sap 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise sap 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise sap 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise server 15 SP4	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP6	2.42.5-150600.10.35 fixed
suse enterprise server 15 SP7	2.48.1-150600.12.36.5 fixed

webkit2gtk4-devel

suse enterprise desktop 15 SP6	2.42.5-150600.10.36 fixed
suse enterprise desktop 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise sap 15 SP6	2.42.5-150600.10.36 fixed
suse enterprise sap 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise server 15 SP6	2.42.5-150600.10.36 fixed
suse enterprise server 15 SP7	2.48.1-150600.12.36.5 fixed

webkitgtk-6_0-injected-bundles

suse enterprise desktop 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise desktop 15 SP6	2.42.5-150600.10.36 fixed
suse enterprise desktop 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise sap 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise sap 15 SP6	2.42.5-150600.10.36 fixed
suse enterprise sap 15 SP7	2.48.1-150600.12.36.5 fixed
suse enterprise server 15 SP4	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP5	2.42.5-150400.4.75.1 fixed
suse enterprise server 15 SP6	2.42.5-150600.10.36 fixed
suse enterprise server 15 SP7	2.48.1-150600.12.36.5 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

webkit2gtk3

RHEL 8	0:2.40.5-1.el8 fixed
RHEL 9	0:2.40.5-1.el9 fixed

webkit2gtk3-devel

RHEL 8	0:2.40.5-1.el8 fixed
RHEL 9	0:2.40.5-1.el9 fixed

webkit2gtk3-jsc

RHEL 8	0:2.40.5-1.el8 fixed
RHEL 9	0:2.40.5-1.el9 fixed

webkit2gtk3-jsc-devel

RHEL 8	0:2.40.5-1.el8 fixed
RHEL 9	0:2.40.5-1.el9 fixed

Common Weakness Enumeration

CWE-94 - Improper Control of Generation of Code ('Code Injection')
The software constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References

http://www.openwall.com/lists/oss-security/2024/02/05/8

https://support.apple.com/en-us/HT213938

https://support.apple.com/en-us/HT213940

https://support.apple.com/en-us/HT213941

http://www.openwall.com/lists/oss-security/2024/02/05/8

https://support.apple.com/en-us/HT213938

https://support.apple.com/en-us/HT213940

https://support.apple.com/en-us/HT213941