Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
CVE-2019-6216: WebKitGTK on Debian can allow remote code execution
CVE-2019-6216 · published 7 years ago
Summary
The WebKitGTK component used in Debian systems has memory handling bugs that could be triggered by specially crafted web content. An attacker could use this to run unwanted code on the affected device. Update to the latest Debian packages that include the fixes to protect your system.
What to do
- Update debian webkit2gtk to version 2.22.5-1.
- Update apple safari to version 12.0.3 or later.
- Update apple iphone_os to version 12.1.3 or later.
- Update apple tvos to version 12.1.2 or later.
- Update apple watchos to version 5.1.3 or later.
- Update apple icloud to version 7.10 or later.
- Update apple itunes to version 12.9.3 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | webkit2gtk |
< 2.22.5-1 Fix: upgrade to 2.22.5-1
|
| Debian:13 | debian | webkit2gtk |
< 2.22.5-1 Fix: upgrade to 2.22.5-1
|
| Debian:14 | debian | webkit2gtk |
< 2.22.5-1 Fix: upgrade to 2.22.5-1
|
| – | apple | safari |
< 12.0.3 cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* |
| – | apple | iphone_os |
< 12.1.3 cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
| – | apple | tvos |
< 12.1.2 cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* |
| – | apple | watchos |
< 5.1.3 cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* |
| – | apple | icloud |
< 7.10 cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:* |
| – | apple | itunes |
< 12.9.3 cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:* |
Original advisory text
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for W...
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.
References
- http://www.securityfocus.com/bid/106699 Third Party Advisory VDB Entry
- https://security.gentoo.org/glsa/201903-12 Third Party Advisory
- https://support.apple.com/HT209443 Vendor Advisory
- https://support.apple.com/HT209447 Vendor Advisory
- https://support.apple.com/HT209448 Vendor Advisory
- https://support.apple.com/HT209449 Vendor Advisory
- https://support.apple.com/HT209450 Vendor Advisory
- https://support.apple.com/HT209451 Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2019-6216 Vendor Advisory
Severity
8.8
High
Type
CWE-787Out-of-bounds Write
Timeline
Published5 Mar 2019
Updated3 Nov 2026
First seen21 Sep 2026
Track software like this
Free during beta