CVE-2023-2203: 
Rocky Linux vulnerability analysis and mitigation

CVE-2023-2203 is a security vulnerability in the WebKitGTK package that was discovered in May 2023. The vulnerability exists as a regression of previously fixed CVE-2023-28205 in Red Hat Enterprise Linux 8.8 and 9.2. The flaw involves an improper input validation issue that may lead to a use-after-free vulnerability (Ubuntu Security, Red Hat CVE).

The vulnerability stems from improper input validation in the WebKitGTK package, which is the port of the portable web rendering engine WebKit to the GTK platform. This issue specifically affects the WebKitGTK packages shipped with Red Hat Enterprise Linux and is not applicable to upstream WebKitGTK versions or packages from other vendors not based on Red Hat Enterprise Linux. The vulnerability has been assigned a CVSS 3.1 base score of 8.8 (High) (Ubuntu Security).

When exploited, this vulnerability allows attackers with network access to pass specially crafted web content files, potentially leading to denial of service or arbitrary code execution on affected systems (Ubuntu Security).

Red Hat has addressed this vulnerability by releasing security updates for affected versions. The fix was delivered through RHSA-2023:2653 for Red Hat Enterprise Linux 9 and RHSA-2023:3108 for Red Hat Enterprise Linux 8 (Red Hat Errata, Red Hat Errata).