https://support.apple.com/HT210346

https://support.apple.com/HT210348

https://support.apple.com/HT210351

https://support.apple.com/HT210353

https://support.apple.com/HT210355

https://support.apple.com/HT210356

https://support.apple.com/HT210357

https://support.apple.com/HT210358

This update for webkit2gtk3 fixes the following issues :

Updated to version 2.24.4 (bsc#1148931).

Security issues fixed :

CVE-2019-8644, CVE-2019-8649, CVE-2019-8658, CVE-2019-8669, CVE-2019-8678, CVE-2019-8680, CVE-2019-8683, CVE-2019-8684, CVE-2019-8688, CVE-2019-8595, CVE-2019-8607, CVE-2019-8615, CVE-2019-8644, CVE-2019-8649, CVE-2019-8658, CVE-2019-8666, CVE-2019-8669, CVE-2019-8671, CVE-2019-8672, CVE-2019-8673, CVE-2019-8676, CVE-2019-8677, CVE-2019-8678, CVE-2019-8679, CVE-2019-8680, CVE-2019-8681, CVE-2019-8683, CVE-2019-8684, CVE-2019-8686, CVE-2019-8687, CVE-2019-8688, CVE-2019-8689, CVE-2019-8690

Non-security issues fixed: Improved loading of multimedia streams to avoid memory exhaustion due to excessive caching.

Updated the user agent string to make happy certain websites which would claim that the browser being used was unsupported.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for webkit2gtk3 fixes the following issues :

Security issues fixed :

  - CVE-2019-8673, CVE-2019-8678, CVE-2019-8686,     CVE-2019-8683, CVE-2019-8671, CVE-2019-8595,     CVE-2019-8684, CVE-2019-8681, CVE-2019-8615,     CVE-2019-8689, CVE-2019-8680, CVE-2019-8672,     CVE-2019-8676, CVE-2019-8666, CVE-2019-8644,     CVE-2019-8658, CVE-2019-8690, CVE-2019-8688,     CVE-2019-8649, CVE-2019-8679, CVE-2019-8687,     CVE-2019-8669, CVE-2019-8677, CVE-2019-8607     (bsc#1148931).

This update was imported from the SUSE:SLE-15:Update update project.

This update for webkit2gtk3 fixes the following issues :

Security issues fixed :

CVE-2019-8673, CVE-2019-8678, CVE-2019-8686, CVE-2019-8683, CVE-2019-8671, CVE-2019-8595, CVE-2019-8684, CVE-2019-8681, CVE-2019-8615, CVE-2019-8689, CVE-2019-8680, CVE-2019-8672, CVE-2019-8676, CVE-2019-8666, CVE-2019-8644, CVE-2019-8658, CVE-2019-8690, CVE-2019-8688, CVE-2019-8649, CVE-2019-8679, CVE-2019-8687, CVE-2019-8669, CVE-2019-8677, CVE-2019-8607 (bsc#1148931).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201909-05 (WebkitGTK+: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in WebkitGTK+. Please       review the CVE identifiers referenced below for details.
  Impact :

    An attacker, by enticing a user to visit maliciously crafted web       content, may be able to execute arbitrary code or cause memory       corruption.
  Workaround :

    There is no known workaround at this time.

Several vulnerabilities have been discovered in the webkit2gtk web engine :

  - CVE-2019-8644     G. Geshev discovered memory corruption issues that can     lead to arbitrary code execution.

  - CVE-2019-8649     Sergei Glazunov discovered an issue that may lead to     universal cross site scripting.

  - CVE-2019-8658     akayn discovered an issue that may lead to universal     cross site scripting.

  - CVE-2019-8666     Zongming Wang and Zhe Jin discovered memory corruption     issues that can lead to arbitrary code execution.

  - CVE-2019-8669     akayn discovered memory corruption issues that can lead     to arbitrary code execution.

  - CVE-2019-8671     Apple discovered memory corruption issues that can lead     to arbitrary code execution.

  - CVE-2019-8672     Samuel Gross discovered memory corruption issues that     can lead to arbitrary code execution.

  - CVE-2019-8673     Soyeon Park and Wen Xu discovered memory corruption     issues that can lead to arbitrary code execution.

  - CVE-2019-8676     Soyeon Park and Wen Xu discovered memory corruption     issues that can lead to arbitrary code execution.

  - CVE-2019-8677     Jihui Lu discovered memory corruption issues that can     lead to arbitrary code execution.

  - CVE-2019-8678     An anonymous researcher, Anthony Lai, Ken Wong,     Jeonghoon Shin, Johnny Yu, Chris Chan, Phil Mok, Alan     Ho, and Byron Wai discovered memory corruption issues     that can lead to arbitrary code execution.

  - CVE-2019-8679     Jihui Lu discovered memory corruption issues that can     lead to arbitrary code execution.

  - CVE-2019-8680     Jihui Lu discovered memory corruption issues that can     lead to arbitrary code execution.

  - CVE-2019-8681     G. Geshev discovered memory corruption issues that can     lead to arbitrary code execution.

  - CVE-2019-8683     lokihardt discovered memory corruption issues that can     lead to arbitrary code execution.

  - CVE-2019-8684     lokihardt discovered memory corruption issues that can     lead to arbitrary code execution.

  - CVE-2019-8686     G. Geshev discovered memory corruption issues that can     lead to arbitrary code execution.

  - CVE-2019-8687     Apple discovered memory corruption issues that can lead     to arbitrary code execution.

  - CVE-2019-8688     Insu Yun discovered memory corruption issues that can     lead to arbitrary code execution.

  - CVE-2019-8689     lokihardt discovered memory corruption issues that can     lead to arbitrary code execution.

  - CVE-2019-8690     Sergei Glazunov discovered an issue that may lead to     universal cross site scripting.

You can see more details on the WebKitGTK and WPE WebKit Security Advisory WSA-2019-0004.

The WebKitGTK project reports many vulnerabilities, including several arbitrary code execution vulnerabilities.

The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 12.1.2 It is, therefore, affected by multiple vulnerabilities in the following components :

  - Safari
  - WebKit

According to its version, the iCloud application installed on the remote Windows host is 7.x prior to 7.13 or 10.x prior to 10.6. It is, therefore, affected by multiple vulnerabilities:

  - Multiple arbitrary code execution vulnerabilities exist with in the WebKit due to improper handling of maliciously     crafted content. An unauthenticated, remote attacker can exploit this to execute arbitrary code. (CVE-2019-8644,     CVE-2019-8666, CVE-2019-8669, CVE-2019-8671, CVE-2019-8672, CVE-2019-8673, CVE-2019-8676, CVE-2019-8677,     CVE-2019-8678, CVE-2019-8679, CVE-2019-8680, CVE-2019-8681, CVE-2019-8683, CVE-2019-8684, CVE-2019-8685,     CVE-2019-8686, CVE-2019-8687, CVE-2019-8688, CVE-2019-8689)

  - A cross-site scripting (XSS) vulnerability exists with in the WebKit due to improper handling synchronous page loads.
    An unauthenticated, remote attacker can exploit this, by convincing a user to click a specially crafted URL, to     execute arbitrary script code in a user's browser session. (CVE-2019-8649)

  - A cross-site scripting (XSS) vulnerability exists with in the WebKit due to improper validation of user-supplied     input before returning it to users. An unauthenticated, remote attacker can exploit this, by convincing a user to     click a specially crafted URL, to execute arbitrary script code in a user's browser session. (CVE-2019-8658)

  - A cross-site scripting (XSS) vulnerability exists with in the WebKit due to improper handling of document loads. An     unauthenticated, remote attacker can exploit this, by convincing a user to click a specially crafted URL, to execute     arbitrary script code in a user's browser session. (CVE-2019-8690)

  - An information disclosure vulnerability exists in the included libxslt library due to improper input validation. An     unauthenticated, remote attacker can exploit this, to disclose potentially sensitive information. (CVE-2019-13118)

The remote host is running Mac OS X 10.12.6 or Mac OS X 10.13.6 and is missing a security update. It is, therefore, affected by multiple vulnerabilities :

  - An application may be able to read restricted memory     (CVE-2019-8691, CVE-2019-8692, CVE-2019-8693)

  - Extracting a zip file containing a symbolic link to an     endpoint in an NFS mount that is attacker controlled may     bypass Gatekeeper (CVE-2019-8656)

  - A remote attacker may be able to cause arbitrary code     execution (CVE-2019-8648, CVE-2018-19860, CVE-2019-8661)

  - A remote attacker may be able to leak memory     (CVE-2019-8646, CVE-2019-8663)

  - A remote attacker may be able to cause unexpected     application termination or arbitrary code execution     ( CVE-2019-8641, CVE-2019-8660)

  - An application may be able to execute arbitrary code     with system privileges (CVE-2019-8695, CVE-2019-8697)

  - An issue existed in Samba that may allow attackers to     perform unauthorized actions by intercepting     communications between services (CVE-2018-16860)

  - An application may be able to execute arbitrary code     with kernel privileges (CVE-2019-8694)

  - A remote attacker may be able to view sensitive     information (CVE-2019-13118)

  - An attacker may be able to trigger a use-after-free in     an application deserializing an untrusted NSDictionary     (CVE-2019-8662)

  - Visiting a malicious website may lead to address bar     spoofing (CVE-2019-8670)

  - The encryption status of a Time Machine backup may be     incorrect (CVE-2019-8667)

  - Parsing a maliciously crafted office document may lead     to an unexpected application termination or arbitrary     code execution (CVE-2019-8657)

  - Processing maliciously crafted web content may lead to     universal cross site scripting (CVE-2019-8649,     CVE-2019-8658, CVE-2019-8690)

  - Processing maliciously crafted web content may lead to     arbitrary code execution (CVE-2019-8644, CVE-2019-8666,     CVE-2019-8669, CVE-2019-8671, CVE-2019-8672,     CVE-2019-8673, CVE-2019-8676, CVE-2019-8677,     CVE-2019-8678, CVE-2019-8679, CVE-2019-8680,     CVE-2019-8681, CVE-2019-8683, CVE-2019-8684,     CVE-2019-8685, CVE-2019-8686, CVE-2019-8687,     CVE-2019-8688, CVE-2019-8689)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.6. It is, therefore, affected by multiple vulnerabilities :

  - An application may be able to read restricted memory     (CVE-2019-8691, CVE-2019-8692, CVE-2019-8693)

  - Extracting a zip file containing a symbolic link to an     endpoint in an NFS mount that is attacker controlled may     bypass Gatekeeper (CVE-2019-8656)

  - A remote attacker may be able to cause arbitrary code     execution (CVE-2019-8648, CVE-2018-19860, CVE-2019-8661)

  - A remote attacker may be able to leak memory     (CVE-2019-8646, CVE-2019-8663)

  - A remote attacker may be able to cause unexpected     application termination or arbitrary code execution     (CVE-2019-8641, CVE-2019-8660)

  - An application may be able to execute arbitrary code     with system privileges (CVE-2019-8695, CVE-2019-8697)

  - An issue existed in Samba that may allow attackers to     perform unauthorized actions by intercepting     communications between services (CVE-2018-16860)

  - An application may be able to execute arbitrary code     with kernel privileges (CVE-2019-8694)

  - A remote attacker may be able to view sensitive     information (CVE-2019-13118)

  - An attacker may be able to trigger a use-after-free in     an application deserializing an untrusted NSDictionary     (CVE-2019-8662)

  - Visiting a malicious website may lead to address bar     spoofing (CVE-2019-8670)

  - The encryption status of a Time Machine backup may be     incorrect (CVE-2019-8667)

  - Parsing a maliciously crafted office document may lead     to an unexpected application termination or arbitrary     code execution (CVE-2019-8657)

  - Processing maliciously crafted web content may lead to     universal cross site scripting (CVE-2019-8690,     CVE-2019-8649, CVE-2019-8658)

  - Processing maliciously crafted web content may lead to     arbitrary code execution (CVE-2019-8644, CVE-2019-8666,     CVE-2019-8669, CVE-2019-8671, CVE-2019-8672,     CVE-2019-8673, CVE-2019-8676, CVE-2019-8677,     CVE-2019-8678, CVE-2019-8679, CVE-2019-8680,     CVE-2019-8681, CVE-2019-8683, CVE-2019-8684,     CVE-2019-8685, CVE-2019-8686, CVE-2019-8687,     CVE-2019-8688, CVE-2019-8689)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

According to its banner, the version of Apple TV on the remote device is prior to 12.4. It is therefore affected by multiple vulnerabilities as described in HT210351.

The version of Apple iTunes installed on the remote Windows host is prior to 12.9.6. It is, therefore, affected by multiple vulnerabilities as referenced in the HT210356 advisory.

  - A remote attacker may be able to view sensitive     information (CVE-2019-13118)

  - Processing maliciously crafted web content may lead to     universal cross site scripting (CVE-2019-8658,     CVE-2019-8690, CVE-2019-8649)

  - Processing maliciously crafted web content may lead to     arbitrary code execution (CVE-2019-8644, CVE-2019-8666,     CVE-2019-8669, CVE-2019-8671, CVE-2019-8672,     CVE-2019-8673, CVE-2019-8676, CVE-2019-8677,     CVE-2019-8678, CVE-2019-8679, CVE-2019-8680,     CVE-2019-8681, CVE-2019-8683, CVE-2019-8684,     CVE-2019-8685, CVE-2019-8686, CVE-2019-8687,     CVE-2019-8688, CVE-2019-8689)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 12.4. It is, therefore, affected by multiple vulnerabilities.

ID	Name	Product	Family	Severity
129844	SUSE SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:2345-2)	Nessus	SuSE Local Security Checks	high
129460	openSUSE Security Update : webkit2gtk3 (openSUSE-2019-2208)	Nessus	SuSE Local Security Checks	high
129459	openSUSE Security Update : webkit2gtk3 (openSUSE-2019-2207)	Nessus	SuSE Local Security Checks	high
129282	SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2019:2428-1)	Nessus	SuSE Local Security Checks	high
128755	Ubuntu 18.04 LTS / 19.04 : webkit2gtk vulnerabilities (USN-4130-1)	Nessus	Ubuntu Local Security Checks	high
128675	SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:2345-1)	Nessus	SuSE Local Security Checks	high
128594	GLSA-201909-05 : WebkitGTK+: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
128511	Debian DSA-4515-1 : webkit2gtk - security update	Nessus	Debian Local Security Checks	high
128440	FreeBSD : webkit2-gtk3 -- Multiple vulnerabilities (e45c3669-caf2-11e9-851a-dcf3aaa3f3ff)	Nessus	FreeBSD Local Security Checks	high
128178	macOS : Apple Safari < 12.1.2 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	high
127914	Apple iCloud 7.x < 7.13 / 10.x < 10.6 Multiple Vulnerabilities	Nessus	Windows	high
127055	macOS Sierra / High Sierra Multiple Vulnerabilities (Security Update 2019-004)	Nessus	MacOS X Local Security Checks	high
127054	macOS 10.14.x < 10.14.6 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	high
127048	Apple TV < 12.4 Multiple Vulnerabilities	Nessus	Misc.	high
127047	Apple iTunes < 12.9.6 Multiple Vulnerabilities (credentialed check)	Nessus	Windows	high
127046	Apple iTunes < 12.9.6 Multiple Vulnerabilities (uncredentialed check)	Nessus	Peer-To-Peer File Sharing	high
126951	Apple iOS < 12.4 Multiple Vulnerabilities	Nessus	Mobile Devices	high

CVE-2019-8658

Description

References

Details

Risk Information

CVSS v2.0

CVSS v3.0

Vulnerable Software

Configuration 1

Tenable Plugins