CVE-2021-45482

Опубликовано: 25 дек. 2021

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889.

Ссылки

http://www.openwall.com/lists/oss-security/2022/01/21/2
Mailing List
Third Party Advisory
https://github.com/ChijinZ/security_advisories/tree/master/webkitgtk-2.32.3
Exploit
Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/01/21/2
Mailing List
Third Party Advisory
https://github.com/ChijinZ/security_advisories/tree/master/webkitgtk-2.32.3
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*

Версия до 2.32.4 (исключая)

EPSS

Процентиль: 75%

0.01532

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-416

Связанные уязвимости

CVE-2021-45482

CVSS3: 6.5

ubuntu

почти 5 лет назад

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889.

CVE-2021-45482

CVSS3: 6.5

redhat

почти 5 лет назад

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889.

CVE-2021-45482

CVSS3: 6.5

debian

почти 5 лет назад

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Cont ...

GHSA-73cm-q45j-cwwr

github

почти 5 лет назад

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889.

ALT-PU-2021-2878

CVSS3: 6.5

altlinux

около 5 лет назад

ALT-PU-2021-2878: package `libwebkitgtk4` update to version 2.32.4-alt1

EPSS

Процентиль: 75%

0.01532

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-416