The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3108 advisory.

  - webkitgtk: Regression of CVE-2023-28205 fixes in the Red Hat Enterprise Linux (CVE-2023-2203)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:2653 advisory.

  - A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free     vulnerability. This flaw allows attackers with network access to pass specially crafted web content files,     causing a denial of service or arbitrary code execution. This CVE exists because of a CVE-2023-28205     security regression for the WebKitGTK package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux     9.2. (CVE-2023-2203)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:3108 advisory.

  - A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free     vulnerability. This flaw allows attackers with network access to pass specially crafted web content files,     causing a denial of service or arbitrary code execution. This CVE exists because of a CVE-2023-28205     security regression for the WebKitGTK package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux     9.2. (CVE-2023-2203)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-3108 advisory.

  - A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free     vulnerability. This flaw allows attackers with network access to pass specially crafted web content files,     causing a denial of service or arbitrary code execution. This CVE exists because of a CVE-2023-28205     security regression for the WebKitGTK package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux     9.2. (CVE-2023-2203)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:3108 advisory.

  - A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free     vulnerability. This flaw allows attackers with network access to pass specially crafted web content files,     causing a denial of service or arbitrary code execution. This CVE exists because of a CVE-2023-28205     security regression for the WebKitGTK package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux     9.2. (CVE-2023-2203)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:2653 advisory.

  - webkitgtk: Regression of CVE-2023-28205 fixes in the Red Hat Enterprise Linux (CVE-2023-2203)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2653 advisory.

  - A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free     vulnerability. This flaw allows attackers with network access to pass specially crafted web content files,     causing a denial of service or arbitrary code execution. This CVE exists because of a CVE-2023-28205     security regression for the WebKitGTK package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux     9.2. (CVE-2023-2203)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:3108 advisory.

  - A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free     vulnerability. This flaw allows attackers with network access to pass specially crafted web content files,     causing a denial of service or arbitrary code execution. This CVE exists because of a CVE-2023-28205     security regression for the WebKitGTK package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux     9.2. (CVE-2023-2203)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
175873	RHEL 8 : webkit2gtk3 (RHSA-2023:3108)	Nessus	Red Hat Local Security Checks	5/16/2023	4/23/2024	high
175607	AlmaLinux 9 : webkit2gtk3 (ALSA-2023:2653)	Nessus	Alma Linux Local Security Checks	5/14/2023	8/2/2023	high
176085	Rocky Linux 8 : webkit2gtk3 (RLSA-2023:3108)	Nessus	Rocky Linux Local Security Checks	5/18/2023	5/29/2023	high
176307	Oracle Linux 8 : webkit2gtk3 (ELSA-2023-3108)	Nessus	Oracle Linux Local Security Checks	5/24/2023	5/29/2023	high
190173	CentOS 8 : webkit2gtk3 (CESA-2023:3108)	Nessus	CentOS Local Security Checks	2/8/2024	2/8/2024	high
175486	RHEL 9 : webkit2gtk3 (RHSA-2023:2653)	Nessus	Red Hat Local Security Checks	5/13/2023	4/28/2024	high
175689	Oracle Linux 9 : webkit2gtk3 (ELSA-2023-2653)	Nessus	Oracle Linux Local Security Checks	5/15/2023	8/2/2023	high
176131	AlmaLinux 8 : webkit2gtk3 (ALSA-2023:3108)	Nessus	Alma Linux Local Security Checks	5/19/2023	5/29/2023	high
177194	Amazon Linux 2 : webkitgtk4 (ALAS-2023-2088)	Nessus	Amazon Linux Local Security Checks	6/13/2023	6/14/2023	critical

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

critical