CVE-2017-1000122 PUBLISHED

The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate certain message metadata, allowing a compromised secondary process to cause a denial of service (release assertion) of the UI process. This vulnerability does not affect Apple products.

EPSS 0.38% · 59.1th percentile

Risk Scores

EPSS Score
0.38%
59.1th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSwebkitgtk0, 2.4.9-2ubuntu2, 2.4.10-0ubuntu1
Ubuntu:20.04:LTSqtwebkit-opensource-src5.212.0~alpha4-1ubuntu2, 5.212.0~alpha4-1ubuntu1, 5.212.0~alpha3-5
Ubuntu:18.04:LTSqtwebkit-source2.3.2-0ubuntu13, 0
Ubuntu:18.04:LTSqtwebkit-opensource-src5.212.0~alpha2-7, 5.212.0~alpha2-7build2, 5.212.0~alpha2-7ubuntu1
Ubuntu:16.04:LTSqtwebkit-opensource-src0, 5.4.2+dfsg-1ubuntu2.1, 5.5.1+dfsg-2ubuntu1
Ubuntu:24.04:LTSqtwebkit-opensource-src5.212.0~alpha4-34, 5.212.0~alpha4-33build1, 5.212.0~alpha4-33
Ubuntu:18.04:LTSwebkitgtk2.4.11-3ubuntu3, 2.4.11-3ubuntu2, 2.4.11-3
Ubuntu:16.04:LTSqtwebkit-source0, 2.3.2-0ubuntu10, 2.3.2-0ubuntu11
Ubuntu:22.04:LTSqtwebkit-opensource-src5.212.0~alpha4-14, 5.212.0~alpha4-13, 5.212.0~alpha4-14build1

Timeline

References

Open in Interactive Console →