In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an array indexing issue existed in the handling of a function in javascript core. This issue was addressed with improved checks.

This update for webkit2gtk3 to version 2.22.5 fixes the following issues :

Security issues fixed :

  - CVE-2018-4372, CVE-2018-4345, CVE-2018-4386,     CVE-2018-4375, CVE-2018-4376, CVE-2018-4378,     CVE-2018-4382, CVE-2018-4392, CVE-2018-4416,     CVE-2018-4191, CVE-2018-4197, CVE-2018-4299,     CVE-2018-4306, CVE-2018-4309, CVE-2018-4312,     CVE-2018-4314, CVE-2018-4315, CVE-2018-4316,     CVE-2018-4317, CVE-2018-4318, CVE-2018-4319,     CVE-2018-4323, CVE-2018-4328, CVE-2018-4358,     CVE-2018-4359, CVE-2018-4361, CVE-2018-4373,     CVE-2018-4162, CVE-2018-4163, CVE-2018-4165,     CVE-2018-11713, CVE-2018-4207, CVE-2018-4208,     CVE-2018-4209, CVE-2018-4210, CVE-2018-4212,     CVE-2018-4213, CVE-2018-4437, CVE-2018-4438,     CVE-2018-4441, CVE-2018-4442, CVE-2018-4443,     CVE-2018-4464 (bsc#1119558, bsc#1116998, bsc#1110279)

This update was imported from the SUSE:SLE-15:Update update project.

This update for webkit2gtk3 to version 2.22.4 fixes the following issues :

Security issues fixed :

CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306, CVE-2018-4309, CVE-2018-4392, CVE-2018-4312, CVE-2018-4314, CVE-2018-4315, CVE-2018-4316, CVE-2018-4317, CVE-2018-4318, CVE-2018-4319, CVE-2018-4323, CVE-2018-4328, CVE-2018-4358, CVE-2018-4359, CVE-2018-4361, CVE-2018-4345, CVE-2018-4372, CVE-2018-4373, CVE-2018-4375, CVE-2018-4376, CVE-2018-4416, CVE-2018-4378, CVE-2018-4382, CVE-2018-4386 (bsc#1110279, bsc#1116998). This update was imported from the SUSE:SLE-12-SP2:Update update project.

This update for webkit2gtk3 to version 2.22.5 fixes the following issues :

Security issues fixed :

CVE-2018-4372, CVE-2018-4345, CVE-2018-4386, CVE-2018-4375, CVE-2018-4376, CVE-2018-4378, CVE-2018-4382, CVE-2018-4392, CVE-2018-4416, CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306, CVE-2018-4309, CVE-2018-4312, CVE-2018-4314, CVE-2018-4315, CVE-2018-4316, CVE-2018-4317, CVE-2018-4318, CVE-2018-4319, CVE-2018-4323, CVE-2018-4328, CVE-2018-4358, CVE-2018-4359, CVE-2018-4361, CVE-2018-4373, CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713, CVE-2018-4207, CVE-2018-4208, CVE-2018-4209, CVE-2018-4210, CVE-2018-4212, CVE-2018-4213, CVE-2018-4437, CVE-2018-4438, CVE-2018-4441, CVE-2018-4442, CVE-2018-4443, CVE-2018-4464 (bsc#1119558, bsc#1116998, bsc#1110279)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for webkit2gtk3 to version 2.22.4 fixes the following issues :

Security issues fixed :

CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306, CVE-2018-4309, CVE-2018-4392, CVE-2018-4312, CVE-2018-4314, CVE-2018-4315, CVE-2018-4316, CVE-2018-4317, CVE-2018-4318, CVE-2018-4319, CVE-2018-4323, CVE-2018-4328, CVE-2018-4358, CVE-2018-4359, CVE-2018-4361, CVE-2018-4345, CVE-2018-4372, CVE-2018-4373, CVE-2018-4375, CVE-2018-4376, CVE-2018-4416, CVE-2018-4378, CVE-2018-4382, CVE-2018-4386 (bsc#1110279, bsc#1116998).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201812-04 (WebkitGTK+: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in WebKitGTK+. Please       review the referenced CVE identifiers for details.
  Impact :

    A remote attacker could execute arbitrary commands or cause a Denial of       Service condition via maliciously crafted web content.
  Workaround :

    There is no known workaround at this time.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3781-1 advisory.

    A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user     were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related     to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary     code execution.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 11.3. It is, therefore, affected by multiple vulnerabilities.

The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 11.1. It is, therefore, affected by multiple vulnerabilities as described in the HT208695 security advisory.

ID	Name	Product	Family	Severity
121339	openSUSE Security Update : webkit2gtk3 (openSUSE-2019-81)	Nessus	SuSE Local Security Checks	high
121291	openSUSE Security Update : webkit2gtk3 (openSUSE-2019-68)	Nessus	SuSE Local Security Checks	high
121206	SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2019:0092-1)	Nessus	SuSE Local Security Checks	high
121093	SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:0059-1)	Nessus	SuSE Local Security Checks	high
119323	GLSA-201812-04 : WebkitGTK+: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
117914	Ubuntu 18.04 LTS : WebKitGTK+ vulnerabilities (USN-3781-1)	Nessus	Ubuntu Local Security Checks	high
108812	Apple iOS < 11.3 Multiple Vulnerabilities	Nessus	Mobile Devices	critical
108805	macOS : Apple Safari < 11.1 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	high

Detections

Analytics

CVE-2018-4210

high

Tenable Plugins

high

high

high

high

high

high

critical

high