Unrated severityNVD Advisory· Published Jan 14, 2019· Updated Aug 4, 2024
CVE-2019-6251
CVE-2019-6251
Description
WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
22- Range: <2.24.1
- Range: <2.24.1
- osv-coords19 versionspkg:rpm/opensuse/gtk3&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2015.0pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%204pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSSpkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP4pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%207
< 2.32.4-1.1+ 18 more
- (no CPE)range: < 2.32.4-1.1
- (no CPE)range: < 2.24.1-lp150.2.19.1
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-3.24.1
- (no CPE)range: < 2.24.1-3.24.1
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
Patches
Vulnerability mechanics
References
15- lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.htmlmitrevendor-advisoryx_refsource_SUSE
- lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.htmlmitrevendor-advisoryx_refsource_SUSE
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSCDI3635E37GL4BNJDRDT2KEUBDLGSO/mitrevendor-advisoryx_refsource_FEDORA
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LACVFU4MYYRPJ3IEA4UCN5KUEAGCCJ72/mitrevendor-advisoryx_refsource_FEDORA
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNPI3R6QWDJBA5KNGA6QSMKYLY5RRHBZ/mitrevendor-advisoryx_refsource_FEDORA
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UO3DIA54X7FOUWFZW5YXC2MZ6KNHG6SW/mitrevendor-advisoryx_refsource_FEDORA
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YO5ZBUWOOXMVZPBYLZRDZF6ZQGBYJERQ/mitrevendor-advisoryx_refsource_FEDORA
- security.gentoo.org/glsa/201909-05mitrevendor-advisoryx_refsource_GENTOO
- usn.ubuntu.com/3948-1/mitrevendor-advisoryx_refsource_UBUNTU
- packetstormsecurity.com/files/152485/WebKitGTK-WPE-WebKit-URI-Spoofing-Code-Execution.htmlmitrex_refsource_MISC
- www.openwall.com/lists/oss-security/2019/04/11/1mitremailing-listx_refsource_MLIST
- bugs.webkit.org/show_bug.cgimitrex_refsource_MISC
- gitlab.gnome.org/GNOME/epiphany/issues/532mitrex_refsource_MISC
- seclists.org/bugtraq/2019/Apr/21mitremailing-listx_refsource_BUGTRAQ
- trac.webkit.org/changeset/243434mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.