The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4201 advisory.

  - webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-32435)

  - webkitgtk: type confusion issue leading to arbitrary code execution (CVE-2023-32439)

  - webkitgtk: arbitrary code execution (CVE-2023-37450)

  - webkitgtk: processing malicious web content may lead to arbitrary code execution (CVE-2023-41993)

  - webkitgtk: type confusion may lead to arbitrary code execution (CVE-2024-23222)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 9 : webkit2gtk3 (RHSA-2023:4201)

critical Nessus Plugin ID 178438

Version 1.6