Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Multiple memory corruption issues were addressed with improved memory handling. This issue affected     versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.
    (CVE-2018-4372)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Multiple memory corruption issues were addressed with improved memory handling. This issue affected
    versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.
    (CVE-2018-4372)

The version of Apple iOS running on the mobile device is prior to 12.1. It is, therefore, affected by multiple vulnerabilities.

The version of Apple Safari installed on the remote host is prior to 12.0.1. It is, therefore, affected by multiple vulnerabilities.

This update for webkit2gtk3 to version 2.22.5 fixes the following issues :

Security issues fixed :

  - CVE-2018-4372, CVE-2018-4345, CVE-2018-4386,     CVE-2018-4375, CVE-2018-4376, CVE-2018-4378,     CVE-2018-4382, CVE-2018-4392, CVE-2018-4416,     CVE-2018-4191, CVE-2018-4197, CVE-2018-4299,     CVE-2018-4306, CVE-2018-4309, CVE-2018-4312,     CVE-2018-4314, CVE-2018-4315, CVE-2018-4316,     CVE-2018-4317, CVE-2018-4318, CVE-2018-4319,     CVE-2018-4323, CVE-2018-4328, CVE-2018-4358,     CVE-2018-4359, CVE-2018-4361, CVE-2018-4373,     CVE-2018-4162, CVE-2018-4163, CVE-2018-4165,     CVE-2018-11713, CVE-2018-4207, CVE-2018-4208,     CVE-2018-4209, CVE-2018-4210, CVE-2018-4212,     CVE-2018-4213, CVE-2018-4437, CVE-2018-4438,     CVE-2018-4441, CVE-2018-4442, CVE-2018-4443,     CVE-2018-4464 (bsc#1119558, bsc#1116998, bsc#1110279)

This update was imported from the SUSE:SLE-15:Update update project.

This update for webkit2gtk3 to version 2.22.4 fixes the following issues :

Security issues fixed :

CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306, CVE-2018-4309, CVE-2018-4392, CVE-2018-4312, CVE-2018-4314, CVE-2018-4315, CVE-2018-4316, CVE-2018-4317, CVE-2018-4318, CVE-2018-4319, CVE-2018-4323, CVE-2018-4328, CVE-2018-4358, CVE-2018-4359, CVE-2018-4361, CVE-2018-4345, CVE-2018-4372, CVE-2018-4373, CVE-2018-4375, CVE-2018-4376, CVE-2018-4416, CVE-2018-4378, CVE-2018-4382, CVE-2018-4386 (bsc#1110279, bsc#1116998). This update was imported from the SUSE:SLE-12-SP2:Update update project.

This update for webkit2gtk3 to version 2.22.5 fixes the following issues :

Security issues fixed :

CVE-2018-4372, CVE-2018-4345, CVE-2018-4386, CVE-2018-4375, CVE-2018-4376, CVE-2018-4378, CVE-2018-4382, CVE-2018-4392, CVE-2018-4416, CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306, CVE-2018-4309, CVE-2018-4312, CVE-2018-4314, CVE-2018-4315, CVE-2018-4316, CVE-2018-4317, CVE-2018-4318, CVE-2018-4319, CVE-2018-4323, CVE-2018-4328, CVE-2018-4358, CVE-2018-4359, CVE-2018-4361, CVE-2018-4373, CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713, CVE-2018-4207, CVE-2018-4208, CVE-2018-4209, CVE-2018-4210, CVE-2018-4212, CVE-2018-4213, CVE-2018-4437, CVE-2018-4438, CVE-2018-4441, CVE-2018-4442, CVE-2018-4443, CVE-2018-4464 (bsc#1119558, bsc#1116998, bsc#1110279)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for webkit2gtk3 to version 2.22.4 fixes the following issues :

Security issues fixed :

CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306, CVE-2018-4309, CVE-2018-4392, CVE-2018-4312, CVE-2018-4314, CVE-2018-4315, CVE-2018-4316, CVE-2018-4317, CVE-2018-4318, CVE-2018-4319, CVE-2018-4323, CVE-2018-4328, CVE-2018-4358, CVE-2018-4359, CVE-2018-4361, CVE-2018-4345, CVE-2018-4372, CVE-2018-4373, CVE-2018-4375, CVE-2018-4376, CVE-2018-4416, CVE-2018-4378, CVE-2018-4382, CVE-2018-4386 (bsc#1110279, bsc#1116998).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3828-1 advisory.

    A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user     were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related     to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary     code execution.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Apple iTunes installed on the remote Windows host is prior to 12.9.1. It is, therefore, affected by multiple vulnerabilities as referenced in the HT209197 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its banner, the version of Apple TV on the remote device is prior to 12.1. It is, therefore, affected by multiple vulnerabilities as described in the HT209194 security advisory.

Note that only 4th generation devices are affected by these vulnerabilities.

The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 12.0.1. It is, therefore, affected by multiple vulnerabilities.

ID	Name	Product	Family	Severity
256063	Linux Distros Unpatched Vulnerability : CVE-2018-4372	Nessus	Misc.	high
426682	Alpine: webkit2gtk: security update to 2.22.4-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
426682	Alpine: webkit2gtk: security update to 2.22.4-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
400645	Alpine: multiple webkit2gtk packages: security update to 2.22.3-r0 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	high
400645	Alpine: multiple webkit2gtk packages: security update to 2.22.3-r0 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
700554	Apple iOS < 12.1 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	medium
700506	Apple Safari < 12.0.1 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
121339	openSUSE Security Update : webkit2gtk3 (openSUSE-2019-81)	Nessus	SuSE Local Security Checks	high
121291	openSUSE Security Update : webkit2gtk3 (openSUSE-2019-68)	Nessus	SuSE Local Security Checks	high
121206	SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2019:0092-1)	Nessus	SuSE Local Security Checks	high
121093	SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:0059-1)	Nessus	SuSE Local Security Checks	high
119255	Ubuntu 18.04 LTS : WebKitGTK+ vulnerabilities (USN-3828-1)	Nessus	Ubuntu Local Security Checks	high
118718	Apple iTunes < 12.9.1 Multiple Vulnerabilities (credentialed check)	Nessus	Windows	high
118717	Apple iTunes < 12.9.1 Multiple Vulnerabilities (uncredentialed check)	Nessus	Peer-To-Peer File Sharing	high
118712	Apple TV < 12.1 Multiple Vulnerabilities	Nessus	Misc.	high
118571	macOS : Apple Safari < 12.0.1 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	high
118569	Apple iOS < 12.1 Multiple Vulnerabilities	Nessus	Mobile Devices	critical

Detections

Analytics

CVE-2018-4372

high

Tenable Plugins

high

high

high

high

high

medium

high

high

high

high

high

high

high

high

high

high

critical