CVE-2023-42875
Description
Processing web content may lead to arbitrary code execution. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, Safari 17. The issue was addressed with improved memory handling.
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2023-42875
Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2023-42875.html
Vendor advisory: arch — https://security.archlinux.org/ASA-202505-5
Vendor advisory: arch — https://security.archlinux.org/ASA-202505-4
Vendor advisory: arch — https://security.archlinux.org/ASA-202505-2
Vendor advisory: redhat — https://access.redhat.com/errata/RHSA-2024:2126
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| rhel | 9 | fixed | |
| arch | fixed | 2.48.2-1 | |
| sles | affected | | |
| debian | bookworm | fixed | 2.42.1-1~deb12u1 |
| debian | bullseye | fixed | 2.42.1-1~deb11u1 |
| debian | forky | fixed | 2.42.0-1 |
| debian | sid | fixed | 2.42.0-1 |
| debian | trixie | fixed | 2.42.0-1 |
References
Verify integrity in audit chain (admin only). AS-IS.