CVE-2021-30858

Опубликовано: 24 авг. 2021

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Ссылки

http://seclists.org/fulldisclosure/2021/Sep/25
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2021/Sep/27
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2021/Sep/29
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2021/Sep/38
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2021/Sep/39
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2021/Sep/50
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/09/20/1
Mailing List
http://www.openwall.com/lists/oss-security/2021/10/26/9
Mailing List
http://www.openwall.com/lists/oss-security/2021/10/27/1
Mailing List
http://www.openwall.com/lists/oss-security/2021/10/27/2
Mailing List
http://www.openwall.com/lists/oss-security/2021/10/27/4
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BO6DMTHZR57JDBOXPSNR2MKDMCRWV265/
Release Notes
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XYNV7ASK4LQVAUMJXNXBS3Z7RVDQ2N3W/
Release Notes
https://support.apple.com/en-us/HT212804
Third Party Advisory
https://support.apple.com/en-us/HT212807
Third Party Advisory
https://support.apple.com/kb/HT212824
Third Party Advisory
https://www.debian.org/security/2021/dsa-4975
Mailing List
Third Party Advisory
https://www.debian.org/security/2021/dsa-4976
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2021/Sep/25
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2021/Sep/27
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия от 13.1 (включая) до 14.8 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 12.5.5 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия от 13.0 (включая) до 14.8 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия до 11.6 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.01026

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-416

Связанные уязвимости

CVE-2021-30858

CVSS3: 8.8

ubuntu

почти 4 года назад

CVE-2021-30858

CVSS3: 8.8

redhat

почти 4 года назад

CVE-2021-30858

CVSS3: 8.8

debian

почти 4 года назад

A use after free issue was addressed with improved memory management. ...

RLSA-2021:4097

rocky

больше 3 лет назад

Moderate: webkit2gtk3 security and bug fix update

ELSA-2022-0059

oracle-oval

больше 3 лет назад

ELSA-2022-0059: webkitgtk4 security update (MODERATE)

EPSS

Процентиль: 76%

0.01026

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-416