PT-2021-24249 · Webkitgtk+7 · Webkitgtk+7

Publicado 2021-09-18 · Atualizado 2022-05-10 · CVE-2021-45483

Positive Technologies (AI Summary) · Pt

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

**Nome do software vulnerável e versões afetadas:

Versões do WebKitGTK anteriores à 2.32.4

Descrição:

O problema está relacionado a um uso após liberação de memória (use-after-free) em WebCore::Frame::page.

Recomendações:

Para versões anteriores à 2.32.4, atualize para a versão 2.32.4 ou posterior para resolver o problema.

Exploit

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALSA-2022:1777

ALT-PU-2021-2835

ALT-PU-2021-2878

CESA-2022_1777

CVE-2021-45483

DSA-4995-1

DSA-4996-1

OPENSUSE-SU-2022:0705-1

OPENSUSE-SU-2022_0705-1

RHSA-2022:1777

RHSA-2022_1777

RHSA-2025:10364

RLSA-2022:1777

SUSE-SU-2022:0690-1

SUSE-SU-2022:0703-1

SUSE-SU-2022:0705-1

Produtos afetados

Alt Linux

Almalinux

Astra Linux

Centos

Red Hat

Rocky Linux

Suse

Webkitgtk

Referências · 109

• 🔥 https://github.com/ChijinZ/security_advisories/tree/master/webkitgtk-2.32.3 · Exploit
• 🔥 https://github.com/springsec/CVE-2022-22620 · Exploit
• 🔥 https://github.com/kmeps4/CVE-2022-22620 · Exploit
• https://suse.com/security/cve/CVE-2022-22590 · Nota
• https://vulners.com/cve/CVE-2022-22637 · Nota
• https://safe-surf.ru/specialists/bulletins-nkcki/674378 · Nota de Segurança
• https://lists.opensuse.org/archives/list/[e-mail]/thread/N4Z4NVNJOFDH7QHR6XKK6NVIFOWPKI3Y · Nota
• https://suse.com/security/cve/CVE-2021-30951 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=2056474 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=2034383 · Nota
• https://t.me/cvenotify/26315 · Publicação no Telegram
• https://vulners.com/cve/CVE-2021-30936 · Nota
• https://vulners.com/cve/CVE-2021-30953 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=2044553 · Nota
• https://suse.com/security/cve/CVE-2022-22589 · Nota