The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4558-1 advisory.

  - A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation.
    This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, Safari 16.2. Visiting a malicious     website may lead to address bar spoofing. (CVE-2022-46705)

  - A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation.
    This issue is fixed in iOS 16.4 and iPadOS 16.4. Visiting a malicious website may lead to address bar     spoofing. (CVE-2022-46725)

  - This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS     16.7.2 and iPadOS 16.7.2. A user's password may be read aloud by VoiceOver. (CVE-2023-32359)

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, Safari     17.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. Processing web content may lead to a denial-     of-service. (CVE-2023-41983)

  - A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS     10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may     lead to arbitrary code execution. (CVE-2023-42852)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES15 Security Update : webkit2gtk3 (SUSE-SU-2023:4558-1)

high Nessus Plugin ID 186256

Version 1.1

Version 1.0

Version 1.1 Dec 1, 2023, 2:20 PM IAVM reference Plugin Feed: 202312011420
Version 1.0 Nov 25, 2023, 12:01 PM New Plugin Feed: 202311251201