CVE-2021-30846

Опубликовано: 19 окт. 2021

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution.

Ссылки

http://seclists.org/fulldisclosure/2021/Oct/60
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2021/Oct/61
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2021/Oct/62
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2021/Oct/63
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/10/26/9
Mailing List
http://www.openwall.com/lists/oss-security/2021/10/27/1
Mailing List
http://www.openwall.com/lists/oss-security/2021/10/27/2
Mailing List
http://www.openwall.com/lists/oss-security/2021/10/27/4
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H6MGXCX7P5AHWOQ6IRT477UKT7IS4DAD/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ON5SDVVPVPCAGFPW2GHYATZVZYLPW2L4/
https://support.apple.com/en-us/HT212807
Vendor Advisory
https://support.apple.com/en-us/HT212814
Vendor Advisory
https://support.apple.com/en-us/HT212815
Vendor Advisory
https://support.apple.com/en-us/HT212816
Vendor Advisory
https://support.apple.com/en-us/HT212819
Vendor Advisory
https://support.apple.com/kb/HT212869
Vendor Advisory
https://www.debian.org/security/2021/dsa-4995
Third Party Advisory
https://www.debian.org/security/2021/dsa-4996
Third Party Advisory
http://seclists.org/fulldisclosure/2021/Oct/60
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2021/Oct/61
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Версия до 15.0 (исключая)

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 14.8 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 14.8 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия до 12.0.1 (исключая)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Версия до 15.0 (исключая)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Версия до 8.0 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

EPSS

Процентиль: 72%

0.00753

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2021-30846

CVSS3: 7.8

ubuntu

почти 4 года назад

CVE-2021-30846

CVSS3: 7.8

redhat

почти 4 года назад

CVE-2021-30846

CVSS3: 7.8

debian

почти 4 года назад

A memory corruption issue was addressed with improved memory handling. ...

GHSA-28cj-vpvc-jgj6

github

около 3 лет назад

openSUSE-SU-2021:3874-1

suse-cvrf

больше 3 лет назад

Security update for webkit2gtk3

EPSS

Процентиль: 72%

0.00753

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787