Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2022-22624

Опубликовано: 08 апр. 2022
Источник: redhat
CVSS3: 8.8

Описание

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and iPadOS 15.4, tvOS 15.4, Safari 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.

A use-after-free issue was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process maliciously crafted web content, leading to arbitrary code execution.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6webkitgtkOut of support scope
Red Hat Enterprise Linux 7webkitgtk3Out of support scope
Red Hat Enterprise Linux 7webkitgtk4Out of support scope
Red Hat Enterprise Linux 8webkit2gtk3FixedRHSA-2022:770408.11.2022
Red Hat Enterprise Linux 9webkit2gtk3FixedRHSA-2022:805415.11.2022

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-416
https://bugzilla.redhat.com/show_bug.cgi?id=2073893webkitgtk: Use-after-free leading to arbitrary code execution

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 3 года назад

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and iPadOS 15.4, tvOS 15.4, Safari 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS3: 8.8
nvd
почти 3 года назад

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and iPadOS 15.4, tvOS 15.4, Safari 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS3: 8.8
debian
почти 3 года назад

A use after free issue was addressed with improved memory management. ...

CVSS3: 8.8
github
почти 3 года назад

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and iPadOS 15.4, tvOS 15.4, Safari 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS3: 8.8
fstec
около 3 лет назад

Уязвимость модулей отображений веб-страниц WPE WebKit и WebKitGTK, связанная с использованием памяти после её освобождения, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

8.8 High

CVSS3