106691

GLSA-201903-12

https://support.apple.com/HT209443

https://support.apple.com/HT209447

https://support.apple.com/HT209449

https://support.apple.com/HT209450

https://support.apple.com/HT209451

The version of Apple iOS running on the mobile device is prior to 12.1.3. It is, therefore, affected by multiple vulnerabilities:

 - Multiple unspecified vulnerabilities in WebKit can lead to arbitrary code execution if a user is enticed to visit a malicious web page. (CVE-2019-6227, CVE-2019-6233, CVE-2019-6234)

 - A maliciously crafted SQL query could lead to arbitrary code execution. (CVE-2018-20346, CVE-2018-20505, CVE-2018-20506)

 - A malicious application could lead to arbitrary code execution with kernel privileges. (CVE-2019-6218)

Additionally several other vulnerabilities exist, the highest of which could allow an attacker to perform a remote code execution attack by enticing a user to view malicious web content.

The version of Apple Safari installed on the remote host is prior to 12.0.3. It is, therefore, affected by the following vulnerabilities :

 - Input-validation errors exist that allow memory corruption leading to arbitrary code execution. (CVE-2019-6212, CVE-2019-6215, CVE-2019-6216, CVE-2019-6217, CVE-2019-6226, CVE-2019-6227, CVE-2019-6233, CVE-2019-6234)

 - Input-validation errors exist that allow an attacker to perform cross-site scripting attacks. (CVE-2019-6228, CVE-2019-6228)

Note that Nessus Network Monitor has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201903-12 (WebkitGTK+: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in WebKitGTK+. Please       review the referenced CVE identifiers for details.
  Impact :

    An attacker could execute arbitrary code or conduct cross-site       scripting.
  Workaround :

    There is no known workaround at this time.

This update for webkit2gtk3 to version 2.22.6 fixes the following issues :

Security issues fixed :

  - CVE-2019-6212: Fixed multiple memory corruption     vulnerabilities which could allow arbitrary code     execution during the processing of special crafted     web-content.

  - CVE-2019-6215: Fixed a type confusion vulnerability     which could allow arbitrary code execution during the     processing of special crafted web-content.

  - CVE-2019-6216: Fixed multiple memory corruption     vulnerabilities which could allow arbitrary code     execution during the processing of special crafted     web-content. 

  - CVE-2019-6217: Fixed multiple memory corruption     vulnerabilities which could allow arbitrary code     execution during the processing of special crafted     web-content. 

  - CVE-2019-6226: Fixed multiple memory corruption     vulnerabilities which could allow arbitrary code     execution during the processing of special crafted     web-content. 

  - CVE-2019-6227: Fixed a memory corruption vulnerability     which could allow arbitrary code execution during the     processing of special crafted web-content.

  - CVE-2019-6229: Fixed a logic issue by improving     validation which could allow arbitrary code execution     during the processing of special crafted web-content.

  - CVE-2019-6233: Fixed a memory corruption vulnerability     which could allow arbitrary code execution during the     processing of special crafted web-content.

  - CVE-2019-6234: Fixed a memory corruption vulnerability     which could allow arbitrary code execution during the     processing of special crafted web-content.

Other issues addressed :

  - Update to version 2.22.6 (bsc#1124937).

  - Kinetic scrolling slow down smoothly when reaching the     ends of pages, instead of abruptly, to better match the     GTK+ behaviour.

  - Fixed Web inspector magnifier under Wayland.

  - Fixed garbled rendering of some websites (e.g. YouTube)     while scrolling under X11.

  - Fixed several crashes, race conditions, and rendering     issues.

This update was imported from the SUSE:SLE-12-SP2:Update update project.

This update for webkit2gtk3 to version 2.22.6 fixes the following issues (boo#1124937 boo#1119558) :

Security vulnerabilities fixed :

  - CVE-2018-4437: Processing maliciously crafted web     content may lead to arbitrary code execution. Multiple     memory corruption issues were addressed with improved     memory handling. (boo#1119553)

  - CVE-2018-4438: Processing maliciously crafted web     content may lead to arbitrary code execution. A logic     issue existed resulting in memory corruption. This was     addressed with improved state management. (boo#1119554)

  - CVE-2018-4441: Processing maliciously crafted web     content may lead to arbitrary code execution. A memory     corruption issue was addressed with improved memory     handling. (boo#1119555)

  - CVE-2018-4442: Processing maliciously crafted web     content may lead to arbitrary code execution. A memory     corruption issue was addressed with improved memory     handling. (boo#1119556)

  - CVE-2018-4443: Processing maliciously crafted web     content may lead to arbitrary code execution. A memory     corruption issue was addressed with improved memory     handling. (boo#1119557)

  - CVE-2018-4464: Processing maliciously crafted web     content may lead to arbitrary code execution. Multiple     memory corruption issues were addressed with improved     memory handling. (boo#1119558)

  - CVE-2019-6212: Processing maliciously crafted web     content may lead to arbitrary code execution. Multiple     memory corruption issues were addressed with improved     memory handling.

  - CVE-2019-6215: Processing maliciously crafted web     content may lead to arbitrary code execution. A type     confusion issue was addressed with improved memory     handling.

  - CVE-2019-6216: Processing maliciously crafted web     content may lead to arbitrary code execution. Multiple     memory corruption issues were addressed with improved     memory handling.

  - CVE-2019-6217: Processing maliciously crafted web     content may lead to arbitrary code execution. Multiple     memory corruption issues were addressed with improved     memory handling.

  - CVE-2019-6226: Processing maliciously crafted web     content may lead to arbitrary code execution. Multiple     memory corruption issues were addressed with improved     memory handling.

  - CVE-2019-6227: Processing maliciously crafted web     content may lead to arbitrary code execution. A memory     corruption issue was addressed with improved memory     handling.

  - CVE-2019-6229: Processing maliciously crafted web     content may lead to universal cross site scripting. A     logic issue was addressed with improved validation.

  - CVE-2019-6233: Processing maliciously crafted web     content may lead to arbitrary code execution. A memory     corruption issue was addressed with improved memory     handling.

  - CVE-2019-6234: Processing maliciously crafted web     content may lead to arbitrary code execution. A memory     corruption issue was addressed with improved memory     handling.

Other bug fixes and changes :

  - Make kinetic scrolling slow down smoothly when reaching     the ends of pages, instead of abruptly, to better match     the GTK+ behaviour.

  - Fix Web inspector magnifier under Wayland.

  - Fix garbled rendering of some websites (e.g. YouTube)     while scrolling under X11.

  - Fix several crashes, race conditions, and rendering     issues.

For a detailed list of changes, please refer to :

- https://webkitgtk.org/security/WSA-2019-0001.html

- https://webkitgtk.org/2019/02/09/webkitgtk2.22.6-released.html

- https://webkitgtk.org/security/WSA-2018-0009.html

- https://webkitgtk.org/2018/12/13/webkitgtk2.22.5-released.html

This update was imported from the SUSE:SLE-15:Update update project.

This update for webkit2gtk3 to version 2.22.6 fixes the following issues :

Security issues fixed :

CVE-2019-6212: Fixed multiple memory corruption vulnerabilities which could allow arbitrary code execution during the processing of special crafted web-content.

CVE-2019-6215: Fixed a type confusion vulnerability which could allow arbitrary code execution during the processing of special crafted web-content.

CVE-2019-6216: Fixed multiple memory corruption vulnerabilities which could allow arbitrary code execution during the processing of special crafted web-content.

CVE-2019-6217: Fixed multiple memory corruption vulnerabilities which could allow arbitrary code execution during the processing of special crafted web-content.

CVE-2019-6226: Fixed multiple memory corruption vulnerabilities which could allow arbitrary code execution during the processing of special crafted web-content.

CVE-2019-6227: Fixed a memory corruption vulnerability which could allow arbitrary code execution during the processing of special crafted web-content.

CVE-2019-6229: Fixed a logic issue by improving validation which could allow arbitrary code execution during the processing of special crafted web-content.

CVE-2019-6233: Fixed a memory corruption vulnerability which could allow arbitrary code execution during the processing of special crafted web-content.

CVE-2019-6234: Fixed a memory corruption vulnerability which could allow arbitrary code execution during the processing of special crafted web-content.

Other issues addressed: Update to version 2.22.6 (bsc#1124937).

Kinetic scrolling slow down smoothly when reaching the ends of pages, instead of abruptly, to better match the GTK+ behaviour.

Fixed Web inspector magnifier under Wayland.

Fixed garbled rendering of some websites (e.g. YouTube) while scrolling under X11.

Fixed several crashes, race conditions, and rendering issues.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for webkit2gtk3 to version 2.22.6 fixes the following issues (boo#1124937 boo#1119558) :

Security vulnerabilities fixed :

CVE-2018-4437: Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling. (boo#1119553)

CVE-2018-4438: Processing maliciously crafted web content may lead to arbitrary code execution. A logic issue existed resulting in memory corruption. This was addressed with improved state management.
(boo#1119554)

CVE-2018-4441: Processing maliciously crafted web content may lead to arbitrary code execution. A memory corruption issue was addressed with improved memory handling. (boo#1119555)

CVE-2018-4442: Processing maliciously crafted web content may lead to arbitrary code execution. A memory corruption issue was addressed with improved memory handling. (boo#1119556)

CVE-2018-4443: Processing maliciously crafted web content may lead to arbitrary code execution. A memory corruption issue was addressed with improved memory handling. (boo#1119557)

CVE-2018-4464: Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling. (boo#1119558)

CVE-2019-6212: Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling.

CVE-2019-6215: Processing maliciously crafted web content may lead to arbitrary code execution. A type confusion issue was addressed with improved memory handling.

CVE-2019-6216: Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling.

CVE-2019-6217: Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling.

CVE-2019-6226: Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling.

CVE-2019-6227: Processing maliciously crafted web content may lead to arbitrary code execution. A memory corruption issue was addressed with improved memory handling.

CVE-2019-6229: Processing maliciously crafted web content may lead to universal cross-site scripting. A logic issue was addressed with improved validation.

CVE-2019-6233: Processing maliciously crafted web content may lead to arbitrary code execution. A memory corruption issue was addressed with improved memory handling.

CVE-2019-6234: Processing maliciously crafted web content may lead to arbitrary code execution. A memory corruption issue was addressed with improved memory handling.

Other bug fixes and changes: Make kinetic scrolling slow down smoothly when reaching the ends of pages, instead of abruptly, to better match the GTK+ behaviour.

Fix Web inspector magnifier under Wayland.

Fix garbled rendering of some websites (e.g. YouTube) while scrolling under X11.

Fix several crashes, race conditions, and rendering issues.

For a detailed list of changes, please refer to:
https://webkitgtk.org/security/WSA-2019-0001.html

https://webkitgtk.org/2019/02/09/webkitgtk2.22.6-released.html

https://webkitgtk.org/security/WSA-2018-0009.html

https://webkitgtk.org/2018/12/13/webkitgtk2.22.5-released.html

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Webkitgtk project reports :

CVE-2019-6212 - Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling.

CVE-2019-6215 - Processing maliciously crafted web content may lead to arbitrary code execution. A type confusion issue was addressed with improved memory handling.

CVE-2019-6216 - Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling.

CVE-2019-6217 - Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling.

CVE-2019-6226 - Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling.

CVE-2019-6227 - Processing maliciously crafted web content may lead to arbitrary code execution. A memory corruption issue was addressed with improved memory handling.

CVE-2019-6229 - Processing maliciously crafted web content may lead to universal cross site scripting. A logic issue was addressed with improved validation.

CVE-2019-6233 - Processing maliciously crafted web content may lead to arbitrary code execution. A memory corruption issue was addressed with improved memory handling.

CVE-2019-6234 - Processing maliciously crafted web content may lead to arbitrary code execution. A memory corruption issue was addressed with improved memory handling.

The version of Apple iTunes installed on the remote Windows host is prior to 12.9.3. It is, therefore, affected by multiple vulnerabilities as referenced in the HT209450 advisory:

  - Multiple vulnerabilities exist due to input processing     flaws in the WebKit component. An attacker may be able     to leverage one of these vulnerability, by providing     maliciously crafted web content, to execute arbitrary     code on the host. (CVE-2019-6212, CVE-2019-6215,     CVE-2019-6216, CVE-2019-6217, CVE-2019-6226,     CVE-2019-6227, CVE-2019-6233, CVE-2019-6234)

  - A universal cross-site scripting vulnerability exists in     the WebKit component. An attacker may be able to leverage     this vulnerability, by providing maliciously crafted web     content, to execute arbitrary script code in the security     context of any site. (CVE-2019-6229)

  - A memory corruption vulnerability exists in the     AppleKeyStore component. An attacker may be able to     leverage this vulnerability to allow a process to     circumvent sandbox restrictions. (CVE-2019-6235)

  - An out-of-bounds read vulnerability exists in the     Core Media component. An attacker may be able to leverage     this vulnerability to allow a malicious application to     elevate its privileges. (CVE-2019-6221)

  - Multiple memory corruption issues exist in the SQLite     component. An attacker may be able to leverage these     vulnerabilities, by executing a malicious SQL query, to     execute arbitrary code on the host. (CVE-2018-20346,     CVE-2018-20505, CVE-2018-20506)


Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 12.0.3. It is, therefore, affected by the following vulnerabilities :

  - Input-validation errors exist that allow memory     corruption leading to arbitrary code execution.
    (CVE-2019-6212, CVE-2019-6215, CVE-2019-6216,     CVE-2019-6217, CVE-2019-6226, CVE-2019-6227,     CVE-2019-6233, CVE-2019-6234)

  - Input-validation errors exist that allow an attacker to     perform cross-site scripting attacks. (CVE-2019-6228,     CVE-2019-6228)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 12.1.3. It is, therefore, affected by multiple vulnerabilities:

  - Multiple unspecified vulnerabilities in WebKit     can lead to arbitrary code execution if a user     is enticed to visit a malicious web page.
    (CVE-2019-6227, CVE-2019-6233, CVE-2019-6234)

  - A maliciously crafted SQL query could lead to     arbitrary code execution.
    (CVE-2018-20346, CVE-2018-20505,     CVE-2018-20506)

  - A malicious application could lead to arbitrary     code execution with kernel privileges.
    (CVE-2019-6218)

Additionally several other vulnerabilities exist, the highest of which could allow an attacker to perform a remote code execution attack by enticing a user to view malicious web content.

ID	Name	Product	Family	Severity
700556	Apple iOS < 12.1.3 Multiple Vulnerabilities (APPLE-SA-2019-1-22-1)	Nessus Network Monitor	Mobile Devices	medium
700508	Apple Safari < 12.0.3 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
122834	GLSA-201903-12 : WebkitGTK+: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium
122745	openSUSE Security Update : webkit2gtk3 (openSUSE-2019-309)	Nessus	SuSE Local Security Checks	medium
122744	openSUSE Security Update : webkit2gtk3 (openSUSE-2019-308)	Nessus	SuSE Local Security Checks	medium
122531	SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:0511-1)	Nessus	SuSE Local Security Checks	medium
122474	SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2019:0497-1)	Nessus	SuSE Local Security Checks	medium
122413	FreeBSD : webkit-gtk -- Multiple vulnabilities (e3aacd6d-3d01-434c-9330-bc9efd40350f)	Nessus	FreeBSD Local Security Checks	medium
121473	Apple iTunes < 12.9.3 Multiple Vulnerabilities (credentialed check)	Nessus	Windows	high
121388	macOS : Apple Safari < 12.0.3 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	medium
121331	Apple iOS < 12.1.3 Multiple Vulnerabilities	Nessus	Mobile Devices	high

CVE-2019-6229

Description

References

Details

Risk Information

CVSS v2.0

CVSS v3.0

Vulnerable Software

Configuration 1

Configuration 2

Tenable Plugins