CVE-2023-42970
Description
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, Safari 17. Processing web content may lead to arbitrary code execution.
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2023-42970
Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2023-42970.html
Vendor advisory: arch — https://security.archlinux.org/ASA-202505-5
Vendor advisory: arch — https://security.archlinux.org/ASA-202505-4
Vendor advisory: arch — https://security.archlinux.org/ASA-202505-2
Vendor advisory: redhat — https://access.redhat.com/errata/RHSA-2024:2126
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| rhel | 9 | fixed | |
| arch | fixed | 2.48.2-1 | |
| sles | affected | | |
| debian | bookworm | fixed | 2.42.1-1~deb12u1 |
| debian | bullseye | fixed | 2.42.1-1~deb11u1 |
| debian | forky | fixed | 2.42.0-1 |
| debian | sid | fixed | 2.42.0-1 |
| debian | trixie | fixed | 2.42.0-1 |
References
Verify integrity in audit chain (admin only). AS-IS.