UBUNTU-CVE-2016-1858

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2016-1858

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-1858.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2016-1858

Upstream

CVE-2016-1858

Downstream

USN-3079-1

Related

USN-3079-1

Published

2016-05-20T00:00:00Z

Modified

2025-09-08T16:43:36Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, improperly tracks taint attributes, which allows remote attackers to obtain sensitive information via a crafted web site.

References

Affected packages

Ubuntu:16.04:LTS / webkit2gtk

Package

Name: webkit2gtk
Purl: pkg:deb/ubuntu/webkit2gtk@2.12.5-0ubuntu0.16.04.1?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.12.5-0ubuntu0.16.04.1

Affected versions

2.*

2.8.5+dfsg1-3

2.10.3+dfsg1-1

2.10.4+dfsg1-1

2.10.5-1

2.10.6-1

2.10.6-1ubuntu1

2.10.8-1ubuntu1

2.10.9-1ubuntu1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "gir1.2-javascriptcoregtk-4.0",
            "binary_version": "2.12.5-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "gir1.2-webkit2-4.0",
            "binary_version": "2.12.5-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "libjavascriptcoregtk-4.0-18",
            "binary_version": "2.12.5-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "libjavascriptcoregtk-4.0-bin",
            "binary_version": "2.12.5-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "libjavascriptcoregtk-4.0-dev",
            "binary_version": "2.12.5-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "libwebkit2gtk-4.0-37",
            "binary_version": "2.12.5-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "libwebkit2gtk-4.0-37-gtk2",
            "binary_version": "2.12.5-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "libwebkit2gtk-4.0-dev",
            "binary_version": "2.12.5-0ubuntu0.16.04.1"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:Pro:16.04:LTS / qtwebkit-opensource-src

Package

Name: qtwebkit-opensource-src
Purl: pkg:deb/ubuntu/qtwebkit-opensource-src@5.5.1+dfsg-2ubuntu1?arch=source&distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.2+dfsg-1ubuntu2.1

5.5.1+dfsg-2ubuntu1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libqt5webkit5",
            "binary_version": "5.5.1+dfsg-2ubuntu1"
        },
        {
            "binary_name": "libqt5webkit5-dev",
            "binary_version": "5.5.1+dfsg-2ubuntu1"
        },
        {
            "binary_name": "libqt5webkit5-qmlwebkitplugin",
            "binary_version": "5.5.1+dfsg-2ubuntu1"
        },
        {
            "binary_name": "qml-module-qtwebkit",
            "binary_version": "5.5.1+dfsg-2ubuntu1"
        },
        {
            "binary_name": "qtwebkit5-doc-html",
            "binary_version": "5.5.1+dfsg-2ubuntu1"
        }
    ]
}

Ubuntu:Pro:16.04:LTS / qtwebkit-source

Package

Name: qtwebkit-source
Purl: pkg:deb/ubuntu/qtwebkit-source@2.3.2-0ubuntu11?arch=source&distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.3.2-0ubuntu10

2.3.2-0ubuntu11

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libqtwebkit-dev",
            "binary_version": "2.3.2-0ubuntu11"
        },
        {
            "binary_name": "libqtwebkit-qmlwebkitplugin",
            "binary_version": "2.3.2-0ubuntu11"
        },
        {
            "binary_name": "libqtwebkit4",
            "binary_version": "2.3.2-0ubuntu11"
        }
    ]
}

Ubuntu:Pro:16.04:LTS / webkitgtk

Package

Name: webkitgtk
Purl: pkg:deb/ubuntu/webkitgtk@2.4.11-0ubuntu0.1?arch=source&distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.4.9-2ubuntu2

2.4.10-0ubuntu1

2.4.11-0ubuntu0.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "gir1.2-javascriptcoregtk-3.0",
            "binary_version": "2.4.11-0ubuntu0.1"
        },
        {
            "binary_name": "gir1.2-webkit-3.0",
            "binary_version": "2.4.11-0ubuntu0.1"
        },
        {
            "binary_name": "gir1.2-webkit2-3.0",
            "binary_version": "2.4.11-0ubuntu0.1"
        },
        {
            "binary_name": "libjavascriptcoregtk-1.0-0",
            "binary_version": "2.4.11-0ubuntu0.1"
        },
        {
            "binary_name": "libjavascriptcoregtk-1.0-dev",
            "binary_version": "2.4.11-0ubuntu0.1"
        },
        {
            "binary_name": "libjavascriptcoregtk-3.0-0",
            "binary_version": "2.4.11-0ubuntu0.1"
        },
        {
            "binary_name": "libjavascriptcoregtk-3.0-bin",
            "binary_version": "2.4.11-0ubuntu0.1"
        },
        {
            "binary_name": "libjavascriptcoregtk-3.0-dev",
            "binary_version": "2.4.11-0ubuntu0.1"
        },
        {
            "binary_name": "libwebkit-dev",
            "binary_version": "2.4.11-0ubuntu0.1"
        },
        {
            "binary_name": "libwebkit2gtk-3.0-25",
            "binary_version": "2.4.11-0ubuntu0.1"
        },
        {
            "binary_name": "libwebkit2gtk-3.0-dev",
            "binary_version": "2.4.11-0ubuntu0.1"
        },
        {
            "binary_name": "libwebkitgtk-1.0-0",
            "binary_version": "2.4.11-0ubuntu0.1"
        },
        {
            "binary_name": "libwebkitgtk-1.0-common",
            "binary_version": "2.4.11-0ubuntu0.1"
        },
        {
            "binary_name": "libwebkitgtk-3.0-0",
            "binary_version": "2.4.11-0ubuntu0.1"
        },
        {
            "binary_name": "libwebkitgtk-3.0-common",
            "binary_version": "2.4.11-0ubuntu0.1"
        },
        {
            "binary_name": "libwebkitgtk-3.0-dev",
            "binary_version": "2.4.11-0ubuntu0.1"
        },
        {
            "binary_name": "libwebkitgtk-common-dev",
            "binary_version": "2.4.11-0ubuntu0.1"
        },
        {
            "binary_name": "libwebkitgtk-dev",
            "binary_version": "2.4.11-0ubuntu0.1"
        }
    ]
}