ubuntu · CVE-2017-13802

Quick triage

Priority: medium Published: 2017-11-12 00:00:00 UTC Updated: 2025-08-25 22:24:34 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2017-13802 medium priority: Ubuntu including 5 source packages (qtwebkit, qtwebkit-opensource-src, qtwebkit-source, webkit2gtk, webkitgtk), 87 status rows across 18 suites (artful, bionic, cosmic, disco, eoan, focal, groovy, hirsute, impish, jammy, kinetic, lunar, mantic, noble, trusty, upstream, xenial, zesty): DNE 38, ignored 29, not-affected 13, released 4, needs-triage 3.

Description:

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

cvelogic Threat Intelligence