CVE-2021-30952

Опубликовано: 24 авг. 2021

Источник: nvd

CVSS3: 7.8

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Ссылки

http://www.openwall.com/lists/oss-security/2022/01/21/2
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/
Broken Link
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/
Broken Link
https://support.apple.com/en-us/HT212975
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT212976
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT212978
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT212980
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT212982
Release Notes
Vendor Advisory
https://www.debian.org/security/2022/dsa-5060
Mailing List
Third Party Advisory
https://www.debian.org/security/2022/dsa-5061
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/01/21/2
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/
Broken Link
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/
Broken Link
https://support.apple.com/en-us/HT212975
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT212976
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT212978
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT212980
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT212982
Release Notes
Vendor Advisory
https://www.debian.org/security/2022/dsa-5060
Mailing List
Third Party Advisory
https://www.debian.org/security/2022/dsa-5061
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Версия до 15.2 (исключая)

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 15.2 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 15.2 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 12.0 (включая) до 12.1 (исключая)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Версия до 15.2 (исключая)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Версия до 8.3 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*

Версия до 2.34.4 (исключая)

cpe:2.3:a:wpewebkit:wpe_webkit:*:*:*:*:*:*:*:*

Версия до 2.34.4 (исключая)

EPSS

Процентиль: 80%

0.01279

Низкий

7.8 High

CVSS3

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-190

Связанные уязвимости

CVE-2021-30952

CVSS3: 7.8

ubuntu

больше 4 лет назад

CVE-2021-30952

CVSS3: 7.8

redhat

около 4 лет назад

CVE-2021-30952

CVSS3: 7.8

debian

больше 4 лет назад

An integer overflow was addressed with improved input validation. This ...

BDU:2022-00098

CVSS3: 7.8

fstec

больше 4 лет назад

Уязвимость операционных систем tvOS, iOS, macOS, iPadOS, watchOS и браузера Safari, связанная с использованием памяти после её освобождения, позволяющая нарушителю выполнить произвольный код

openSUSE-SU-2022:0705-1

suse-cvrf

около 4 лет назад

Security update for webkit2gtk3

EPSS

Процентиль: 80%

0.01279

Низкий

7.8 High

CVSS3

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-190