https://support.apple.com/kb/HT209340

https://support.apple.com/kb/HT209342

https://support.apple.com/kb/HT209343

https://support.apple.com/kb/HT209344

https://support.apple.com/kb/HT209345

https://support.apple.com/kb/HT209346

The version of Apple iOS running on the mobile device is prior to 12.1.1. It is, therefore, affected by multiple vulnerabilities. The highest of which could allow an attacker to perform a remote code execution attack by enticing a user to view malicious web content.

The version of Apple Safari installed on the remote host is prior to 12.0.2. It is, therefore, affected by the following vulnerabilities :

 - Input-validation errors exist that allow memory corruption leading to arbitrary code execution. (CVE-2018-4437, CVE-2018-4438, CVE-2018-4441, CVE-2018-4442, CVE-2018-4443, CVE-2018-4464)

Note that other flaws exist that allow information disclosure and address bar spoofing.

This update for webkit2gtk3 to version 2.22.6 fixes the following issues (boo#1124937 boo#1119558) :

Security vulnerabilities fixed :

  - CVE-2018-4437: Processing maliciously crafted web     content may lead to arbitrary code execution. Multiple     memory corruption issues were addressed with improved     memory handling. (boo#1119553)

  - CVE-2018-4438: Processing maliciously crafted web     content may lead to arbitrary code execution. A logic     issue existed resulting in memory corruption. This was     addressed with improved state management. (boo#1119554)

  - CVE-2018-4441: Processing maliciously crafted web     content may lead to arbitrary code execution. A memory     corruption issue was addressed with improved memory     handling. (boo#1119555)

  - CVE-2018-4442: Processing maliciously crafted web     content may lead to arbitrary code execution. A memory     corruption issue was addressed with improved memory     handling. (boo#1119556)

  - CVE-2018-4443: Processing maliciously crafted web     content may lead to arbitrary code execution. A memory     corruption issue was addressed with improved memory     handling. (boo#1119557)

  - CVE-2018-4464: Processing maliciously crafted web     content may lead to arbitrary code execution. Multiple     memory corruption issues were addressed with improved     memory handling. (boo#1119558)

  - CVE-2019-6212: Processing maliciously crafted web     content may lead to arbitrary code execution. Multiple     memory corruption issues were addressed with improved     memory handling.

  - CVE-2019-6215: Processing maliciously crafted web     content may lead to arbitrary code execution. A type     confusion issue was addressed with improved memory     handling.

  - CVE-2019-6216: Processing maliciously crafted web     content may lead to arbitrary code execution. Multiple     memory corruption issues were addressed with improved     memory handling.

  - CVE-2019-6217: Processing maliciously crafted web     content may lead to arbitrary code execution. Multiple     memory corruption issues were addressed with improved     memory handling.

  - CVE-2019-6226: Processing maliciously crafted web     content may lead to arbitrary code execution. Multiple     memory corruption issues were addressed with improved     memory handling.

  - CVE-2019-6227: Processing maliciously crafted web     content may lead to arbitrary code execution. A memory     corruption issue was addressed with improved memory     handling.

  - CVE-2019-6229: Processing maliciously crafted web     content may lead to universal cross site scripting. A     logic issue was addressed with improved validation.

  - CVE-2019-6233: Processing maliciously crafted web     content may lead to arbitrary code execution. A memory     corruption issue was addressed with improved memory     handling.

  - CVE-2019-6234: Processing maliciously crafted web     content may lead to arbitrary code execution. A memory     corruption issue was addressed with improved memory     handling.

Other bug fixes and changes :

  - Make kinetic scrolling slow down smoothly when reaching     the ends of pages, instead of abruptly, to better match     the GTK+ behaviour.

  - Fix Web inspector magnifier under Wayland.

  - Fix garbled rendering of some websites (e.g. YouTube)     while scrolling under X11.

  - Fix several crashes, race conditions, and rendering     issues.

For a detailed list of changes, please refer to :

- https://webkitgtk.org/security/WSA-2019-0001.html

- https://webkitgtk.org/2019/02/09/webkitgtk2.22.6-released.html

- https://webkitgtk.org/security/WSA-2018-0009.html

- https://webkitgtk.org/2018/12/13/webkitgtk2.22.5-released.html

This update was imported from the SUSE:SLE-15:Update update project.

This update for webkit2gtk3 to version 2.22.6 fixes the following issues (boo#1124937 boo#1119558) :

Security vulnerabilities fixed :

CVE-2018-4437: Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling. (boo#1119553)

CVE-2018-4438: Processing maliciously crafted web content may lead to arbitrary code execution. A logic issue existed resulting in memory corruption. This was addressed with improved state management.
(boo#1119554)

CVE-2018-4441: Processing maliciously crafted web content may lead to arbitrary code execution. A memory corruption issue was addressed with improved memory handling. (boo#1119555)

CVE-2018-4442: Processing maliciously crafted web content may lead to arbitrary code execution. A memory corruption issue was addressed with improved memory handling. (boo#1119556)

CVE-2018-4443: Processing maliciously crafted web content may lead to arbitrary code execution. A memory corruption issue was addressed with improved memory handling. (boo#1119557)

CVE-2018-4464: Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling. (boo#1119558)

CVE-2019-6212: Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling.

CVE-2019-6215: Processing maliciously crafted web content may lead to arbitrary code execution. A type confusion issue was addressed with improved memory handling.

CVE-2019-6216: Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling.

CVE-2019-6217: Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling.

CVE-2019-6226: Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling.

CVE-2019-6227: Processing maliciously crafted web content may lead to arbitrary code execution. A memory corruption issue was addressed with improved memory handling.

CVE-2019-6229: Processing maliciously crafted web content may lead to universal cross-site scripting. A logic issue was addressed with improved validation.

CVE-2019-6233: Processing maliciously crafted web content may lead to arbitrary code execution. A memory corruption issue was addressed with improved memory handling.

CVE-2019-6234: Processing maliciously crafted web content may lead to arbitrary code execution. A memory corruption issue was addressed with improved memory handling.

Other bug fixes and changes: Make kinetic scrolling slow down smoothly when reaching the ends of pages, instead of abruptly, to better match the GTK+ behaviour.

Fix Web inspector magnifier under Wayland.

Fix garbled rendering of some websites (e.g. YouTube) while scrolling under X11.

Fix several crashes, race conditions, and rendering issues.

For a detailed list of changes, please refer to:
https://webkitgtk.org/security/WSA-2019-0001.html

https://webkitgtk.org/2019/02/09/webkitgtk2.22.6-released.html

https://webkitgtk.org/security/WSA-2018-0009.html

https://webkitgtk.org/2018/12/13/webkitgtk2.22.5-released.html

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for webkit2gtk3 to version 2.22.5 fixes the following issues :

Security issues fixed :

  - CVE-2018-4438: Fixed a logic issue which lead to memory     corruption (bsc#1119554)

  - CVE-2018-4437, CVE-2018-4441, CVE-2018-4442,     CVE-2018-4443, CVE-2018-4464: Fixed multiple memory     corruption issues with improved memory handling     (bsc#1119553, bsc#1119555, bsc#1119556, bsc#1119557,     bsc#1119558)

This update was imported from the SUSE:SLE-12-SP2:Update update project.

This update for webkit2gtk3 to version 2.22.5 fixes the following issues :

Security issues fixed :

CVE-2018-4438: Fixed a logic issue which lead to memory corruption (bsc#1119554)

CVE-2018-4437, CVE-2018-4441, CVE-2018-4442, CVE-2018-4443, CVE-2018-4464: Fixed multiple memory corruption issues with improved memory handling (bsc#1119553, bsc#1119555, bsc#1119556, bsc#1119557, bsc#1119558)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for webkit2gtk3 to version 2.22.5 fixes the following issues :

Security issues fixed :

  - CVE-2018-4372, CVE-2018-4345, CVE-2018-4386,     CVE-2018-4375, CVE-2018-4376, CVE-2018-4378,     CVE-2018-4382, CVE-2018-4392, CVE-2018-4416,     CVE-2018-4191, CVE-2018-4197, CVE-2018-4299,     CVE-2018-4306, CVE-2018-4309, CVE-2018-4312,     CVE-2018-4314, CVE-2018-4315, CVE-2018-4316,     CVE-2018-4317, CVE-2018-4318, CVE-2018-4319,     CVE-2018-4323, CVE-2018-4328, CVE-2018-4358,     CVE-2018-4359, CVE-2018-4361, CVE-2018-4373,     CVE-2018-4162, CVE-2018-4163, CVE-2018-4165,     CVE-2018-11713, CVE-2018-4207, CVE-2018-4208,     CVE-2018-4209, CVE-2018-4210, CVE-2018-4212,     CVE-2018-4213, CVE-2018-4437, CVE-2018-4438,     CVE-2018-4441, CVE-2018-4442, CVE-2018-4443,     CVE-2018-4464 (bsc#1119558, bsc#1116998, bsc#1110279)

This update was imported from the SUSE:SLE-15:Update update project.

This update for webkit2gtk3 to version 2.22.5 fixes the following issues :

Security issues fixed :

CVE-2018-4372, CVE-2018-4345, CVE-2018-4386, CVE-2018-4375, CVE-2018-4376, CVE-2018-4378, CVE-2018-4382, CVE-2018-4392, CVE-2018-4416, CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306, CVE-2018-4309, CVE-2018-4312, CVE-2018-4314, CVE-2018-4315, CVE-2018-4316, CVE-2018-4317, CVE-2018-4318, CVE-2018-4319, CVE-2018-4323, CVE-2018-4328, CVE-2018-4358, CVE-2018-4359, CVE-2018-4361, CVE-2018-4373, CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713, CVE-2018-4207, CVE-2018-4208, CVE-2018-4209, CVE-2018-4210, CVE-2018-4212, CVE-2018-4213, CVE-2018-4437, CVE-2018-4438, CVE-2018-4441, CVE-2018-4442, CVE-2018-4443, CVE-2018-4464 (bsc#1119558, bsc#1116998, bsc#1110279)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its banner, the version of Apple TV on the remote device is prior to 12.1.1. It is, therefore, affected by multiple vulnerabilities as described in the HT209342 security advisory:

  - Multiple elevation of privilege vulnerabilities exist due to     improper memory handling. An application can exploit this to gain     elevated privileges. (CVE-2018-4303, CVE-2018-4435)

  - Multiple unspecified command execution vulnerabilities exist that     allow an attacker to execute arbitrary commands, sometimes with     kernel privileges. (CVE-2018-4427, CVE-2018-4437, CVE-2018-4438,     CVE-2018-4447, CVE-2018-4461, CVE-2018-4464, CVE-2018-4441,     CVE-2018-4442, CVE-2018-4443)

  - An unspecified denial of service (DoS) vulnerability exists in     the Kernel that allows an an attacker in a privileged position to     perform a denial of service attack. (CVE-2018-4460)

Additionally, the version of Apple TV is also affected by several additional vulnerabilities including cross-site scripting (XSS) and an information disclosure vulnerability.

Note that only 4th generation devices are affected by these vulnerabilities.

The version of Apple iTunes installed on the remote Windows host is prior to 12.9.2. It is, therefore, affected by multiple vulnerabilities as referenced in the HT209345 advisory.

  - Visiting a malicious website may lead to address bar spoofing     (CVE-2018-4440)

  - Visiting a malicious website may lead to user interface spoofing     (CVE-2018-4439)

  - Processing maliciously crafted web content may lead to arbitrary     code execution. (CVE-2018-4437, CVE-2018-4464)

  - Processing maliciously crafted web content may lead to arbitrary     code execution. (CVE-2018-4441, CVE-2018-4442, CVE-2018-4443)

  - Processing maliciously crafted web content may lead to arbitrary     code execution. (CVE-2018-4438)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 12.1. It is, therefore, affected by multiple vulnerabilities. The highest of which could allow an attacker to perform a remote code execution attack by enticing a user to view malicious web content.

The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 12.0.2. It is, therefore, affected by the following vulnerabilities :

  - Input-validation errors exist that allow memory     corruption leading to arbitrary code execution.
    (CVE-2018-4437, CVE-2018-4438, CVE-2018-4441,     CVE-2018-4442, CVE-2018-4443, CVE-2018-4464)

Note that other flaws exist that allow information disclosure and address bar spoofing.

ID	Name	Product	Family	Severity
700555	Apple iOS < 12.1.1 Multiple Vulnerabilities (APPLE-SA-2018-12-05-1)	Nessus Network Monitor	Mobile Devices	medium
700507	Apple Safari < 12.0.2 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
122744	openSUSE Security Update : webkit2gtk3 (openSUSE-2019-308)	Nessus	SuSE Local Security Checks	medium
122474	SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2019:0497-1)	Nessus	SuSE Local Security Checks	medium
121538	openSUSE Security Update : webkit2gtk3 (openSUSE-2019-108)	Nessus	SuSE Local Security Checks	medium
121343	SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:0146-1)	Nessus	SuSE Local Security Checks	medium
121339	openSUSE Security Update : webkit2gtk3 (openSUSE-2019-81)	Nessus	SuSE Local Security Checks	medium
121206	SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2019:0092-1)	Nessus	SuSE Local Security Checks	medium
119839	Apple TV < 12.1.1 Multiple Vulnerabilities	Nessus	Misc.	high
119767	Apple iTunes < 12.9.2 Multiple Vulnerabilities (credentialed check)	Nessus	Windows	medium
119610	Apple iOS < 12.1.1 Multiple Vulnerabilities	Nessus	Mobile Devices	high
119498	macOS : Apple Safari < 12.0.2 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	medium

CVE-2018-4438

Description

References

Details

Risk Information

CVSS v2.0

CVSS v3.0

Vulnerable Software

Configuration 1

Configuration 2

Tenable Plugins