UBUNTU-CVE-2016-9643

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2016-9643

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-9643.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2016-9643

Related

CVE-2016-9643
USN-3257-1

Published

2017-03-07T00:00:00Z

Modified

2025-06-03T17:31:17Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service (memory consumption) as demonstrated in a large number of ($ (open parenthesis and dollar) followed by {-2,16} and a large number of +) (plus close parenthesis).

References

Affected packages

Ubuntu:16.04:LTS / webkit2gtk

Package

Name: webkit2gtk
Purl: pkg:deb/ubuntu/webkit2gtk@2.16.1-0ubuntu0.16.04.1?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.16.1-0ubuntu0.16.04.1

Affected versions

2.*

2.8.5+dfsg1-3

2.10.3+dfsg1-1

2.10.4+dfsg1-1

2.10.5-1

2.10.6-1

2.10.6-1ubuntu1

2.10.8-1ubuntu1

2.10.9-1ubuntu1

2.12.5-0ubuntu0.16.04.1

2.14.2-0ubuntu0.16.04.1

2.14.3-0ubuntu0.16.04.1

2.14.5-0ubuntu0.16.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_name": "gir1.2-javascriptcoregtk-4.0",
            "binary_version": "2.16.1-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "gir1.2-webkit2-4.0",
            "binary_version": "2.16.1-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "libjavascriptcoregtk-4.0-18",
            "binary_version": "2.16.1-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "libjavascriptcoregtk-4.0-18-dbgsym",
            "binary_version": "2.16.1-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "libjavascriptcoregtk-4.0-bin",
            "binary_version": "2.16.1-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "libjavascriptcoregtk-4.0-bin-dbgsym",
            "binary_version": "2.16.1-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "libjavascriptcoregtk-4.0-dev",
            "binary_version": "2.16.1-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "libwebkit2gtk-4.0-37",
            "binary_version": "2.16.1-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "libwebkit2gtk-4.0-37-dbgsym",
            "binary_version": "2.16.1-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "libwebkit2gtk-4.0-37-gtk2",
            "binary_version": "2.16.1-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "libwebkit2gtk-4.0-37-gtk2-dbgsym",
            "binary_version": "2.16.1-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "libwebkit2gtk-4.0-dev",
            "binary_version": "2.16.1-0ubuntu0.16.04.1"
        },
        {
            "binary_name": "libwebkit2gtk-4.0-doc",
            "binary_version": "2.16.1-0ubuntu0.16.04.1"
        }
    ]
}

Ubuntu:Pro:16.04:LTS / qtwebkit-opensource-src

Package

Name: qtwebkit-opensource-src
Purl: pkg:deb/ubuntu/qtwebkit-opensource-src@5.5.1+dfsg-2ubuntu1?arch=source&distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.2+dfsg-1ubuntu2.1

5.5.1+dfsg-2ubuntu1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / qtwebkit-source

Package

Name: qtwebkit-source
Purl: pkg:deb/ubuntu/qtwebkit-source@2.3.2-0ubuntu11?arch=source&distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.3.2-0ubuntu10

2.3.2-0ubuntu11

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / webkitgtk

Package

Name: webkitgtk
Purl: pkg:deb/ubuntu/webkitgtk@2.4.11-0ubuntu0.1?arch=source&distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.4.9-2ubuntu2

2.4.10-0ubuntu1

2.4.11-0ubuntu0.1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / qtwebkit-opensource-src

Package

Name: qtwebkit-opensource-src
Purl: pkg:deb/ubuntu/qtwebkit-opensource-src@5.212.0~alpha2-7ubuntu1?arch=source&distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.9.1+dfsg-5ubuntu1

5.9.1+dfsg-5ubuntu3

5.212.0~alpha2-5build2

5.212.0~alpha2-5build4

5.212.0~alpha2-7

5.212.0~alpha2-7build2

5.212.0~alpha2-7ubuntu1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / qtwebkit-source

Package

Name: qtwebkit-source
Purl: pkg:deb/ubuntu/qtwebkit-source@2.3.2-0ubuntu13?arch=source&distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.3.2-0ubuntu13

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / webkitgtk

Package

Name: webkitgtk
Purl: pkg:deb/ubuntu/webkitgtk@2.4.11-3ubuntu3?arch=source&distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.4.11-3

2.4.11-3ubuntu2

2.4.11-3ubuntu3

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:20.04:LTS / qtwebkit-opensource-src

Package

Name: qtwebkit-opensource-src
Purl: pkg:deb/ubuntu/qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1?arch=source&distro=esm-apps/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.212.0~alpha3-3

5.212.0~alpha3-5

5.212.0~alpha3-6

5.212.0~alpha3-7

5.212.0~alpha4-1

5.212.0~alpha4-1ubuntu1

5.212.0~alpha4-1ubuntu2

5.212.0~alpha4-1ubuntu2.1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / qtwebkit-opensource-src

Package

Name: qtwebkit-opensource-src
Purl: pkg:deb/ubuntu/qtwebkit-opensource-src@5.212.0~alpha4-15ubuntu1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.212.0~alpha4-12

5.212.0~alpha4-13

5.212.0~alpha4-14

5.212.0~alpha4-14build1

5.212.0~alpha4-14ubuntu2

5.212.0~alpha4-15ubuntu1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS / qtwebkit-opensource-src

Package

Name: qtwebkit-opensource-src
Purl: pkg:deb/ubuntu/qtwebkit-opensource-src@5.212.0~alpha4-36?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.212.0~alpha4-33

5.212.0~alpha4-33build1

5.212.0~alpha4-34

5.212.0~alpha4-34ubuntu3

5.212.0~alpha4-34ubuntu4

5.212.0~alpha4-36

Ecosystem specific

{
    "ubuntu_priority": "medium"
}