CVE-2023-25358

Publication date 2 March 2023

Last updated 24 July 2024

Ubuntu priority

Cvss 3 Severity Score

A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

Show unmaintained releases

Package	Ubuntu Release	Status
qtwebkit-opensource-src	24.04 LTS noble	Ignored
	23.10 mantic	Ignored
	23.04 lunar	Ignored end of life, was needs-triage
	22.10 kinetic	Ignored end of life, was needs-triage
	22.04 LTS jammy	Ignored
	20.04 LTS focal	Ignored
	18.04 LTS bionic	Ignored
	16.04 LTS xenial	Ignored
	14.04 LTS trusty	Ignored end of standard support
qtwebkit-source	24.04 LTS noble	Not in release
	23.10 mantic	Not in release
	23.04 lunar	Not in release
	22.10 kinetic	Not in release
	22.04 LTS jammy	Not in release
	20.04 LTS focal	Not in release
	18.04 LTS bionic	Ignored
	16.04 LTS xenial	Ignored
	14.04 LTS trusty	Ignored end of standard support
webkit2gtk	24.04 LTS noble	Not affected
	23.10 mantic	Not affected
	23.04 lunar	Not affected
	22.10 kinetic	Fixed 2.38.6-0ubuntu0.22.10.1
	22.04 LTS jammy	Fixed 2.38.6-0ubuntu0.22.04.1
	20.04 LTS focal	Fixed 2.38.6-0ubuntu0.20.04.1
	18.04 LTS bionic	Ignored
	16.04 LTS xenial	Ignored
	14.04 LTS trusty	Not in release
webkitgtk	24.04 LTS noble	Not in release
	23.10 mantic	Not in release
	23.04 lunar	Not in release
	22.10 kinetic	Not in release
	22.04 LTS jammy	Not in release
	20.04 LTS focal	Not in release
	18.04 LTS bionic	Ignored
	16.04 LTS xenial	Ignored
	14.04 LTS trusty	Ignored end of standard support
wpewebkit	24.04 LTS noble	Not in release
	23.10 mantic	Not in release
	23.04 lunar	Not in release
	22.10 kinetic	Not in release
	22.04 LTS jammy	Ignored
	20.04 LTS focal	Ignored
	18.04 LTS bionic	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Ignored end of standard support