PT-2021-3524 · Google+3 · Google Chrome+3

David Erceg · Publicado 2021-04-23 · Atualizado 2024-06-15 · CVE-2021-30557

Positive Technologies (AI Summary) · Pt

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Nome do software vulnerável e versões afetadas

Versões do Google Chrome anteriores à 91.0.4472.114

Descrição

O problema está relacionado a um uso após liberação de memória (use after free) no TabGroups, o que pode potencialmente levar à corrupção da pilha (heap). Um invasor que convença um usuário a instalar uma extensão maliciosa pode explorar essa vulnerabilidade por meio de uma página HTML maliciosa, permitindo potencialmente que um invasor remoto cause uma negação de serviço.

Recomendações

Para versões do Google Chrome anteriores à 91.0.4472.114, atualize para a versão 91.0.4472.114 ou posterior para resolver o problema.

Exploit

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2021-2063

ALT-PU-2021-2068

ALT-PU-2021-2097

ALT-PU-2021-2118

ALT-PU-2021-2141

BDU:2021-03574

CVE-2021-30557

OPENSUSE-SU-2021:0898-1

OPENSUSE-SU-2021:0938-1

OPENSUSE-SU-2021:0948-1

OPENSUSE-SU-2021:0949-1

OPENSUSE-SU-2021_0898-1

OPENSUSE-SU-2021_0948-1

OPENSUSE-SU-2021_0949-1

OPENSUSE-SU-2022:0110-1

OPENSUSE-SU-2022_0110-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:12948-1

Produtos afetados

Alt Linux

Astra Linux

Google Chrome

Suse

Referências · 2365

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/chrome_cve_2021_21220_v8_insufficient_validation.rb · Exploit
• 🔥 https://github.com/ZeusBox/CVE-2021-37980 · Exploit
• 🔥 https://github.com/Phuong39/PoC-CVE-2021-30632 · Exploit
• 🔥 https://github.com/SpiralBL0CK/Chrome-V8-RCE-CVE-2021-38003 · Exploit
• 🔥 https://github.com/CrackerCat/CVE-2021-30632 · Exploit
• 🔥 https://github.com/Peterpan0927/TFC-Chrome-v8-bug-CVE-2021-38001-poc · Exploit
• 🔥 https://github.com/xmzyshypnc/CVE-2021-30551 · Exploit
• 🔥 https://github.com/security-dbg/CVE-2021-21220 · Exploit
• 🔥 https://github.com/maldiohead/TFC-Chrome-v8-bug-CVE-2021-38001-poc · Exploit
• 🔥❌ https://github.com/ohnonoyesyes/CVE-2021-21224 · Exploit, Deleted
• 🔥❌ https://github.com/Expdev893/CVE-2021-30632 · Exploit, Deleted
• 🔥❌ https://github.com/Lagal1990/CVE-2021-30632 · Exploit, Deleted
• https://suse.com/security/cve/CVE-2022-1862 · Nota
• https://suse.com/security/cve/CVE-2018-6169 · Nota
• https://suse.com/security/cve/CVE-2011-3020 · Nota