The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7704 advisory.

  - webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-22624, CVE-2022-22628,     CVE-2022-26709, CVE-2022-26710, CVE-2022-26717)

  - webkitgtk: Buffer overflow leading to arbitrary code execution (CVE-2022-22629)

  - webkitgtk: Cookie management issue leading to sensitive user information disclosure (CVE-2022-22662)

  - webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26700, CVE-2022-26716,     CVE-2022-26719)

  - webkitgtk: Heap buffer overflow in WebCore::TextureMapperLayer::setContentsLayer leading to arbitrary code     execution (CVE-2022-30293)

  - webkitgtk: Processing maliciously crafted web content may lead to  arbitrary code execution     (CVE-2022-32792)

  - webkitgtk:  malicious content may lead to UI spoofing (CVE-2022-32816)

  - webkitgtk: UI spoofing while Visiting a website that frames malicious content (CVE-2022-32891)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 8 : webkit2gtk3 (RHSA-2022:7704)

high Nessus Plugin ID 167169

Version 1.6