CVE-2021-30547

Опубликовано: 15 июн. 2021

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Уязвимость записи за пределами допустимых границ в ANGLE в Google Chrome при обработке специально созданной HTML-страницы

Описание

Уязвимость записи за пределами допустимых границ в компоненте ANGLE в Google Chrome позволяет злоумышленнику удаленно выполнять доступ к памяти за пределами допустимых границ с помощью специально созданной HTML-страницы.

Затронутые версии ПО

Google Chrome < 91.0.4472.101

Тип уязвимости

Запись за пределами допустимых границ (out of bounds write)
Доступ к памяти за пределами допустимых границ (out of bounds memory access)

Ссылки

https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html
Release Notes
Vendor Advisory
https://crbug.com/1210414
Issue Tracking
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/07/msg00009.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/07/msg00010.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ETMZL6IHCTCTREEL434BQ4THQ7EOHJ43/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAT6EOXVQFE6JFMFQF4IKAOUQSHMHL54/
https://security.gentoo.org/glsa/202202-03
Third Party Advisory
https://security.gentoo.org/glsa/202208-14
Third Party Advisory
https://www.debian.org/security/2021/dsa-4939
Third Party Advisory
https://www.debian.org/security/2021/dsa-4940
Third Party Advisory
https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html
Release Notes
Vendor Advisory
https://crbug.com/1210414
Issue Tracking
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/07/msg00009.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/07/msg00010.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ETMZL6IHCTCTREEL434BQ4THQ7EOHJ43/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAT6EOXVQFE6JFMFQF4IKAOUQSHMHL54/
https://security.gentoo.org/glsa/202202-03
Third Party Advisory
https://security.gentoo.org/glsa/202208-14
Third Party Advisory
https://www.debian.org/security/2021/dsa-4939
Third Party Advisory
https://www.debian.org/security/2021/dsa-4940
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Версия до 91.0.4472.101 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

Конфигурация 4

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия до 97.0 (исключая)

EPSS

Процентиль: 70%

0.00641

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2021-30547

CVSS3: 8.8

ubuntu

около 4 лет назад

Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

CVE-2021-30547

CVSS3: 8.8

redhat

около 4 лет назад

Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

CVE-2021-30547

msrc

около 4 лет назад

Chromium: CVE-2021-30547 Out of bounds write in ANGLE

CVE-2021-30547

CVSS3: 8.8

debian

около 4 лет назад

Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 a ...

GHSA-h3c6-pc9c-gf82

CVSS3: 8.8

github

около 3 лет назад

Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

EPSS

Процентиль: 70%

0.00641

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787