The version of Apple iOS running on the mobile device is prior to 12.2. It is, therefore, affected by multiple vulnerabilities:

  - An unspecified memory corruption issue could allow an     attacker to execute code with kernel privileges.
    (CVE-2019-8529)

  - An unspecified buffer overflow issues was addressed     that could address an attacker to cause unexpected     system termination or corrupt kernel memory.
    (CVE-2019-8527)

  - An unspecified memory corruption issue in an SMS Link     could allow an attacker arbitrary execute code.     (CVE-2019-8553)

This update for webkit2gtk3 to version 2.24.1 fixes the following issues :

Security issues fixed :

CVE-2019-6201, CVE-2019-6251, CVE-2019-7285, CVE-2019-7292, CVE-2019-8503, CVE-2019-8506, CVE-2019-8515, CVE-2019-8518, CVE-2019-8523, CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544, CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563, CVE-2019-11070 (bsc#1132256).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS     12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously     crafted web content may lead to arbitrary code execution. (CVE-2019-6201)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is affected by the vulnerability described in GLSA-201909-05 (WebkitGTK+: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in WebkitGTK+. Please       review the CVE identifiers referenced below for details.
  Impact :

    An attacker, by enticing a user to visit maliciously crafted web       content, may be able to execute arbitrary code or cause memory       corruption.
  Workaround :

    There is no known workaround at this time.

This update for webkit2gtk3 to version 2.24.1 fixes the following issues :

Security issues fixed :

  - CVE-2019-6201, CVE-2019-6251, CVE-2019-7285,     CVE-2019-7292, CVE-2019-8503, CVE-2019-8506,     CVE-2019-8515, CVE-2019-8518, CVE-2019-8523,     CVE-2019-8524, CVE-2019-8535, CVE-2019-8536,     CVE-2019-8544, CVE-2019-8551, CVE-2019-8558,     CVE-2019-8559, CVE-2019-8563, CVE-2019-11070     (bsc#1132256). This update was imported from the     SUSE:SLE-15:Update update project.

The WebKitGTK project reports many vulnerabilities, including several arbitrary code execution vulnerabilities.

This update for webkit2gtk3 to version 2.24.1 fixes the following issues :

Security issues fixed :

CVE-2019-6201, CVE-2019-6251, CVE-2019-7285, CVE-2019-7292, CVE-2019-8503, CVE-2019-8506, CVE-2019-8515, CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544, CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563, CVE-2019-11070 (bsc#1132256).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for webkit2gtk3 to version 2.24.1 fixes the following issues :

Security issues fixed :

  - CVE-2019-6201, CVE-2019-6251, CVE-2019-7285,     CVE-2019-7292, CVE-2019-8503, CVE-2019-8506,     CVE-2019-8515, CVE-2019-8524, CVE-2019-8535,     CVE-2019-8536, CVE-2019-8544, CVE-2019-8551,     CVE-2019-8558, CVE-2019-8559, CVE-2019-8563,     CVE-2019-11070 (bsc#1132256).

This update was imported from the SUSE:SLE-12-SP2:Update update project.

The version of Apple iOS running on the mobile device is prior to 12.2. It is, therefore, affected by multiple vulnerabilities:

 - An unspecified memory corruption issue could allow an attacker to execute code with kernel privileges. (CVE-2019-8529)

 - An unspecified buffer overflow issues was addressed that could address an attacker to cause unexpected system termination or corrupt kernel memory. (CVE-2019-8527)

 - An unspecified memory corruption issue in an SMS Link could allow an attacker arbitrary execute code. (CVE-2019-8553)

ID	Name	Product	Family	Published	Updated	Severity
123080	Apple iOS < 12.2 Multiple Vulnerabilities	Nessus	Mobile Devices	3/26/2019	11/3/2025	critical
124645	SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2019:1137-1)	Nessus	SuSE Local Security Checks	5/6/2019	4/25/2023	high
258233	Linux Distros Unpatched Vulnerability : CVE-2019-6201	Nessus	Misc.	8/30/2025	12/16/2025	high
128594	GLSA-201909-05 : WebkitGTK+: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	9/9/2019	5/6/2022	high
124851	openSUSE Security Update : webkit2gtk3 (openSUSE-2019-1374)	Nessus	SuSE Local Security Checks	5/13/2019	5/23/2024	high
126519	FreeBSD : webkit2-gtk3 -- Multiple vulnerabilities (3dd46e05-9fb0-11e9-bf65-00012e582166)	Nessus	FreeBSD Local Security Checks	7/8/2019	5/10/2024	high
124674	SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:1155-1)	Nessus	SuSE Local Security Checks	5/7/2019	4/25/2023	high
125019	openSUSE Security Update : webkit2gtk3 (openSUSE-2019-1391)	Nessus	SuSE Local Security Checks	5/14/2019	5/22/2024	high
700558	Apple iOS < 12.2 Multiple Vulnerabilities (APPLE-SA-2019-3-25-1)	Nessus Network Monitor	Mobile Devices	4/17/2019	4/17/2019	high

Detections

Analytics

Plugins Search

critical

high

high

high

high

high

high

high

high