CVE-2017-2371
Published: 16 February 2017
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site.
Priority
Medium
CVSS 3 base score: 6.5
Status
| Package | Release | Status |
|---|---|---|
|
qtwebkit-opensource-src Launchpad, Ubuntu, Debian |
precise |
Does not exist
|
| trusty |
Does not exist
(trusty was ignored [no update available])
|
|
| upstream |
Needs triage
|
|
| xenial |
Ignored
(no update available)
|
|
| yakkety |
Ignored
(no update available)
|
|
|
qtwebkit-source Launchpad, Ubuntu, Debian |
precise |
Ignored
(see notes)
|
| trusty |
Does not exist
(trusty was ignored [no update available])
|
|
| upstream |
Needs triage
|
|
| xenial |
Ignored
(no update available)
|
|
| yakkety |
Ignored
(no update available)
|
|
|
webkit Launchpad, Ubuntu, Debian |
precise |
Ignored
(see notes)
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
| xenial |
Does not exist
|
|
| yakkety |
Does not exist
|
|
|
webkit2gtk Launchpad, Ubuntu, Debian |
precise |
Does not exist
|
| trusty |
Does not exist
|
|
| upstream |
Released
(2.14.4)
|
|
| xenial |
Released
(2.14.5-0ubuntu0.16.04.1)
|
|
| yakkety |
Released
(2.14.5-0ubuntu0.16.10.1)
|
|
|
webkitgtk Launchpad, Ubuntu, Debian |
precise |
Does not exist
|
| trusty |
Does not exist
(trusty was ignored [no update available])
|
|
| upstream |
Needs triage
|
|
| xenial |
Ignored
(no update available)
|
|
| yakkety |
Ignored
(no update available)
|
Notes
| Author | Note |
|---|---|
| jdstrand | webkit receives limited support. For details, see https://wiki.ubuntu.com/SecurityTeam/FAQ#webkit webkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8 |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2371
- https://webkitgtk.org/security/WSA-2017-0002.html
- https://ubuntu.com/security/notices/USN-3200-1
- NVD
- Launchpad
- Debian