The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service (Buffer Overflow) or possibly have unspecified other impact, related to UIProcess/API/gtk/WebKitScriptDialogGtk.cpp, UIProcess/API/gtk/WebKitScriptDialogImpl.cpp, and UIProcess/API/gtk/WebKitWebViewGtk.cpp, as demonstrated by GNOME Web (aka Epiphany).

This update for webkit2gtk3 fixes the following issues :

Security issue fixed :

  - CVE-2019-8375: Fixed an issue in UIProcess subsystem     which could allow the script dialog size to exceed the     web view size leading to Buffer Overflow or other     unspecified impact (bsc#1126768).&#9; 

This update was imported from the SUSE:SLE-12-SP2:Update update project.

This update for webkit2gtk3 fixes the following issues :

Security issue fixed :

CVE-2019-8375: Fixed an issue in UIProcess subsystem which could allow the script dialog size to exceed the web view size leading to Buffer Overflow or other unspecified impact (bsc#1126768).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3948-1 advisory.

    A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user     were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related     to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary     code execution.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for webkit2gtk3 to version 2.24.0 fixes the following issue :

Security issue fixed :

  - CVE-2019-8375: Fixed an issue in UIProcess subsystem     which could allow the script dialog size to exceed the     web view size leading to Buffer Overflow or other     unspecified impact (bsc#1126768).

This update was imported from the SUSE:SLE-15:Update update project.

This update for webkit2gtk3 to version 2.24.0 fixes the following issue :

Security issue fixed :

CVE-2019-8375: Fixed an issue in UIProcess subsystem which could allow the script dialog size to exceed the web view size leading to Buffer Overflow or other unspecified impact (bsc#1126768).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
124585	openSUSE Security Update : webkit2gtk3 (openSUSE-2019-1316)	Nessus	SuSE Local Security Checks	critical
124314	SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:1030-1)	Nessus	SuSE Local Security Checks	critical
124115	Ubuntu 18.04 LTS : WebKitGTK+ vulnerabilities (USN-3948-1)	Nessus	Ubuntu Local Security Checks	critical
124081	openSUSE Security Update : webkit2gtk3 (openSUSE-2019-1206)	Nessus	SuSE Local Security Checks	critical
123824	SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2019:0890-1)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2019-8375

critical

Tenable Plugins

critical

critical

critical

critical

critical