Debian: DSA-4739-1 Moderate: Webkit2gtk Command Injection Vulnerabilities
debian
August 3, 2020
The following vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2020-9862
Summary
CVE-2020-9862
Ophir Lojkine discovered that copying a URL from the Web Inspector
may lead to command injection.
CVE-2020-9893
0011 discovered that a remote attacker may be able to cause
unexpected application termination or arbitrary code execution.
CVE-2020-9894
0011 discovered that a remote attacker may be able to cause
unexpected application termination or arbitrary code execution.
CVE-2020-9895
Wen Xu discovered that a remote attacker may be able to cause
unexpected application termination or arbitrary code execution.
CVE-2020-9915
Ayoub Ait Elmokhtar discovered that processing maliciously crafted
web content may prevent Content Security Policy from being
enforced.
CVE-2020-9925
An anonymous researcher discovered that processing maliciously
crafted web content may lead to universal cross site scripting.
For the stable distribution (buster), these problems have been fixed in
version 2.28.4-1~deb10u1.
We recommend that you upgrade your webkit2gtk pac...
PREVIOUS
NEXT
Package: webkit2gtk
CVE ID: CVE-2020-9862 CVE-2020-9893 CVE-2020-9894 CVE-2020-9895
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!