リモートの SUSE Linux SLES12 / SLES_SAP12 ホストには、SUSE-SU-2022:2089-1 のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

  - 状態管理を改善することで、メモリ破損の問題に対処しました。この問題は、tvOS 15.5、watchOS 8.6、iOS 15.5および iPadOS 15.5、macOS Monterey 12.4、Safari 15.5で修正されています。悪意を持って細工された Web コンテンツを処理すると、コードが実行される可能性があります。(CVE-2022-26700)

  - メモリ管理を改善することで、メモリ解放後使用 (Use After Free) の問題に対処しました。この問題は、tvOS 15.5、iOS 15.5および iPadOS 15.5、watchOS 8.6、macOS Monterey 12.4、Safari 15.5で修正されています。悪意を持って細工された Web コンテンツを処理すると、任意のコードが実行される可能性があります。(CVE-2022-26709)

  - 状態管理を改善することで、メモリ破損の問題に対処しました。この問題は、tvOS 15.5、iOS 15.5および iPadOS 15.5、watchOS 8.6、macOS Monterey 12.4、Safari 15.5で修正されています。悪意を持って細工されたWebコンテンツを処理すると、任意のコードが実行される可能性があります。(CVE-2022-26716、CVE-2022-26719)

  - メモリ管理を改善することで、メモリ解放後使用 (Use After Free) の問題に対処しました。この問題は、tvOS 15.5、watchOS 8.6、iOS 15.5および iPadOS 15.5、macOS Monterey 12.4、Safari 15.5、iTunes 12.12.4for Windows で修正されています。
    悪意を持って細工された Web コンテンツを処理すると、任意のコードが実行される可能性があります。(CVE-2022-26717)

  - 2.36.0までの WebKitGTK (および WPE WebKit) で、以下にヒープベースのバッファオーバーフローがあります。WebCore: : TextureMapperLayer: : setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp。
    (CVE-2022-30293)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

モバイルデバイスで実行中の Apple iOS のバージョンは、15.5 より前です。したがって、複数の脆弱性の影響を受けます。

リモートの CentOS Linux 8 ホストにインストールされているパッケージは、CESA-2022: 7704 のアドバイザリに記載されている脆弱性の影響を受けます。

  - webkitgtk: 任意のコード実行を引き起こすメモリ解放後使用 (Use After Free) (CVE-2022-22624、CVE-2022-22628、CVE-2022-26709、CVE-2022-26710、CVE-2022-26717)

  - webkitgtk: 任意のコード実行を引き起こすバッファオーバーフロー (CVE-2022-22629)

  - webkitgtk: クッキー管理の問題により、機密性の高いユーザー情報の漏洩が発生 (CVE-2022-22662)

  - webkitgtk: メモリ破損問題により、任意のコードが実行される可能性があります (CVE-2022-26700、CVE-2022-26716、CVE-2022-26719)

  - webkitgtk: WebCore: : TextureMapperLayer: : setContentsLayer におけるヒープバッファオーバーフローによる任意のコード実行 (CVE-2022-30293)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

リモート Redhat Enterprise Linux 8 ホストにインストールされているパッケージは、RHSA-2022: 7704 のアドバイザリに記載されている複数の脆弱性の影響を受けます。

  - webkitgtk: 任意のコード実行を引き起こすメモリ解放後使用 (Use After Free) (CVE-2022-22624、CVE-2022-22628、CVE-2022-26709、CVE-2022-26710、CVE-2022-26717)

  - webkitgtk: 任意のコード実行を引き起こすバッファオーバーフロー (CVE-2022-22629)

  - webkitgtk: クッキー管理の問題により、機密性の高いユーザー情報の漏洩が発生 (CVE-2022-22662)

  - webkitgtk: メモリ破損問題により、任意のコードが実行される可能性があります (CVE-2022-26700、CVE-2022-26716、CVE-2022-26719)

  - webkitgtk: WebCore: : TextureMapperLayer: : setContentsLayer におけるヒープバッファオーバーフローによる任意のコード実行 (CVE-2022-30293)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

リモートホストは、macOS/Mac OS X を実行していますが、バージョン 12.4Monterey より前の 12.xです。したがって、以下の複数の脆弱性による影響を受けます。

  - この脆弱性を悪用すると、メモリ破損の問題が発生する可能性があります。(CVE-2018-25032)

  - 注意深く細工されたリクエスト本文により、mod_lua マルチパートパーサーでバッファオーバーフローが発生する可能性があります。(CVE-2021-44790)

  - この脆弱性が悪用されると、任意のコード実行につながる可能性があります。(CVE-2021-45444)

Nessusはこれらの問題をテストしておらず、代わりにオペレーティングシステムの自己報告されたバージョン番号にのみ依存しています。

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7704 advisory.

  - webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-22624, CVE-2022-22628,     CVE-2022-26709, CVE-2022-26710, CVE-2022-26717)

  - webkitgtk: Buffer overflow leading to arbitrary code execution (CVE-2022-22629)

  - webkitgtk: Cookie management issue leading to sensitive user information disclosure (CVE-2022-22662)

  - webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26700, CVE-2022-26716,     CVE-2022-26719)

  - webkitgtk: Heap buffer overflow in WebCore::TextureMapperLayer::setContentsLayer leading to arbitrary code     execution (CVE-2022-30293)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:8054 advisory.

  - A use after free issue was addressed with improved memory management. This issue is fixed in macOS     Monterey 12.3, iOS 15.4 and iPadOS 15.4, tvOS 15.4, Safari 15.4. Processing maliciously crafted web     content may lead to arbitrary code execution. (CVE-2022-22624)

  - A use after free issue was addressed with improved memory management. This issue is fixed in macOS     Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously     crafted web content may lead to arbitrary code execution. (CVE-2022-22628)

  - A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey     12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and iPadOS 15.4, tvOS 15.4.
    Processing maliciously crafted web content may lead to arbitrary code execution. (CVE-2022-22629)

  - A cookie management issue was addressed with improved state management. This issue is fixed in Security     Update 2022-003 Catalina, macOS Big Sur 11.6.5. Processing maliciously crafted web content may disclose     sensitive user information. (CVE-2022-22662)

  - A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5,     watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted     web content may lead to code execution. (CVE-2022-26700)

  - A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5,     iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted     web content may lead to arbitrary code execution. (CVE-2022-26709)

  - A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and     iPadOS 15.5, macOS Monterey 12.4, tvOS 15.5, watchOS 8.6. Processing maliciously crafted web content may     lead to arbitrary code execution. (CVE-2022-26710)

  - A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5,     iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted     web content may lead to arbitrary code execution. (CVE-2022-26716, CVE-2022-26719)

  - A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5,     watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5, iTunes 12.12.4 for Windows.
    Processing maliciously crafted web content may lead to arbitrary code execution. (CVE-2022-26717)

  - In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in     WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp.
    (CVE-2022-30293)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:8054 advisory.

  - A use after free issue was addressed with improved memory management. This issue is fixed in macOS     Monterey 12.3, iOS 15.4 and iPadOS 15.4, tvOS 15.4, Safari 15.4. Processing maliciously crafted web     content may lead to arbitrary code execution. (CVE-2022-22624)

  - A use after free issue was addressed with improved memory management. This issue is fixed in macOS     Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously     crafted web content may lead to arbitrary code execution. (CVE-2022-22628)

  - A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey     12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and iPadOS 15.4, tvOS 15.4.
    Processing maliciously crafted web content may lead to arbitrary code execution. (CVE-2022-22629)

  - A cookie management issue was addressed with improved state management. This issue is fixed in Security     Update 2022-003 Catalina, macOS Big Sur 11.6.5. Processing maliciously crafted web content may disclose     sensitive user information. (CVE-2022-22662)

  - A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5,     watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted     web content may lead to code execution. (CVE-2022-26700)

  - A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5,     iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted     web content may lead to arbitrary code execution. (CVE-2022-26709)

  - A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and     iPadOS 15.5, macOS Monterey 12.4, tvOS 15.5, watchOS 8.6. Processing maliciously crafted web content may     lead to arbitrary code execution. (CVE-2022-26710)

  - A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5,     iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted     web content may lead to arbitrary code execution. (CVE-2022-26716, CVE-2022-26719)

  - A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5,     watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5, iTunes 12.12.4 for Windows.
    Processing maliciously crafted web content may lead to arbitrary code execution. (CVE-2022-26717)

  - In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in     WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp.
    (CVE-2022-30293)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7704 advisory.

  - webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-22624, CVE-2022-22628,     CVE-2022-26709, CVE-2022-26710, CVE-2022-26717)

  - webkitgtk: Buffer overflow leading to arbitrary code execution (CVE-2022-22629)

  - webkitgtk: Cookie management issue leading to sensitive user information disclosure (CVE-2022-22662)

  - webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26700, CVE-2022-26716,     CVE-2022-26719)

  - webkitgtk: Heap buffer overflow in WebCore::TextureMapperLayer::setContentsLayer leading to arbitrary code     execution (CVE-2022-30293)

  - webkitgtk: Processing maliciously crafted web content may lead to  arbitrary code execution     (CVE-2022-32792)

  - webkitgtk:  malicious content may lead to UI spoofing (CVE-2022-32816)

  - webkitgtk: UI spoofing while Visiting a website that frames malicious content (CVE-2022-32891)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 15.5. It is, therefore, affected by multiple vulnerabilities.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2089-1 advisory.

  - A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5,     watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted     web content may lead to code execution. (CVE-2022-26700)

  - A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5,     iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted     web content may lead to arbitrary code execution. (CVE-2022-26709)

  - A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5,     iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted     web content may lead to arbitrary code execution. (CVE-2022-26716, CVE-2022-26719)

  - A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5,     watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5, iTunes 12.12.4 for Windows.
    Processing maliciously crafted web content may lead to arbitrary code execution. (CVE-2022-26717)

  - In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in     WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp.
    (CVE-2022-30293)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.4 Monterey. It is, therefore, affected by multiple vulnerabilities :

  - Exploitation of this vulnerability may lead to memory corruption issue. (CVE-2018-25032)

  - A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser. (CVE-2021-44790)

  - Exploitation of this vulnerability may lead to arbitrary code execution. (CVE-2021-45444)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
162310	SUSE SLES12 セキュリティ更新プログラム: webkit2gtk3 (SUSE-SU-2022:2089-1)	Nessus	SuSE Local Security Checks	2022/6/16	2023/7/13	high
161384	Apple iOS < 15.5複数の脆弱性 (HT213258)	Nessus	Mobile Devices	2022/5/19	2024/6/26	critical
167122	CentOS 8: webkit2gtk3 (CESA-2022: 7704)	Nessus	CentOS Local Security Checks	2022/11/8	2023/10/5	high
167169	RHEL 8 : webkit2gtk3 (RHSA-2022: 7704)	Nessus	Red Hat Local Security Checks	2022/11/9	2024/4/28	high
161410	macOS 12.x < 12.4 (HT213257)	Nessus	MacOS X Local Security Checks	2022/5/20	2024/5/28	critical
167122	CentOS 8 : webkit2gtk3 (CESA-2022:7704)	Nessus	CentOS Local Security Checks	2022/11/8	2023/10/5	high
168001	AlmaLinux 9 : webkit2gtk3 (ALSA-2022:8054)	Nessus	Alma Linux Local Security Checks	2022/11/19	2023/10/3	high
185026	Rocky Linux 9 : webkit2gtk3 (RLSA-2022:8054)	Nessus	Rocky Linux Local Security Checks	2023/11/7	2023/11/7	high
167169	RHEL 8 : webkit2gtk3 (RHSA-2022:7704)	Nessus	Red Hat Local Security Checks	2022/11/9	2024/4/28	high
161384	Apple iOS < 15.5 Multiple Vulnerabilities (HT213258)	Nessus	Mobile Devices	2022/5/19	2024/6/26	critical
162310	SUSE SLES12 Security Update : webkit2gtk3 (SUSE-SU-2022:2089-1)	Nessus	SuSE Local Security Checks	2022/6/16	2023/7/13	high
161410	macOS 12.x < 12.4 (HT213257)	Nessus	MacOS X Local Security Checks	2022/5/20	2024/5/28	critical

偵測

搜尋 Plugin

high

critical

high

high

critical

high

high

high

high

critical

high

critical