Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cnvdChina National Vulnerability DatabaseCNVD-2022-06525
HistoryDec 04, 2020 - 12:00 a.m.

WebKitGTK post-release reuse vulnerability

2020-12-0400:00:00
China National Vulnerability Database
www.cnvd.org.cn
7

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON

WebKitGTK is a full-featured port of the WebKit rendering engine.A post-release reuse vulnerability exists in the WebSocket functionality of WebKitGTK 2.30.0. An attacker could exploit the vulnerability to achieve remote code execution by tricking a user into visiting a specially crafted web page.

CPENameOperatorVersion
webkitgtk webkitgtkeq2.30.0

Related

prion 1
talos 1
redhatcve 1
alpinelinux 1
ubuntucve 1
veracode 1
debiancve 1
cve 1
archlinux 1
mageia 1
openvas 5
nessus 12
oraclelinux 1
almalinux 1
gentoo 1
suse 2
osv 3
rocky 1
redhat 6
ibm 2
prion
prion
Remote code execution
2020-12-03 17:15:00
talos
talos
Webkit WebSocket code execution vulnerability
2020-11-30 00:00:00
redhatcve
redhatcve
CVE-2020-13543
2020-12-02 12:15:13
alpinelinux
alpinelinux
CVE-2020-13543
2020-12-03 17:15:00
ubuntucve
ubuntucve
CVE-2020-13543
2020-12-03 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2021-04-29 12:12:08
debiancve
debiancve
CVE-2020-13543
2020-12-03 17:15:00
cve
cve
CVE-2020-13543
2020-12-03 17:15:00
archlinux
archlinux
[ASA-202011-28] webkit2gtk: arbitrary code execution
2020-11-26 00:00:00
mageia
mageia
Updated webkit2 packages fix security vulnerabilities
2020-11-27 23:14:57
openvas
openvas
Mageia: Security Advisory (MGASA-2020-0441)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:3864-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:3867-1)
2021-06-09 00:00:00
nessus
nessus
CentOS 8 : GNOME (CESA-2021:1586)
2021-05-19 00:00:00
GLSA-202012-10 : WebkitGTK+: Multiple vulnerabilities
2020-12-24 00:00:00
Oracle Linux 8 : GNOME (ELSA-2021-1586)
2021-05-26 00:00:00
oraclelinux
oraclelinux
GNOME security, bug fix, and enhancement update
2021-05-25 00:00:00
almalinux
almalinux
Moderate: GNOME security, bug fix, and enhancement update
2021-05-18 05:35:26
gentoo
gentoo
WebkitGTK+: Multiple vulnerabilities
2020-12-23 00:00:00
suse
suse
Security update for webkit2gtk3 (important)
2020-12-21 00:00:00
Security update for webkit2gtk3 (important)
2020-12-21 00:00:00
osv
osv
webkit2gtk - security update
2020-11-23 00:00:00
Moderate: GNOME security, bug fix, and enhancement update
2021-05-18 05:35:26
Moderate: GNOME security, bug fix, and enhancement update
2021-05-18 05:35:26
rocky
rocky
GNOME security, bug fix, and enhancement update
2021-05-18 05:35:26
redhat
redhat
(RHSA-2021:1586) Moderate: GNOME security, bug fix, and enhancement update
2021-05-18 05:35:26
(RHSA-2021:2479) Moderate: Red Hat OpenShift Container Storage 4.6.5 security and bug fix update
2021-06-17 15:42:10
(RHSA-2021:2136) Moderate: Openshift Logging security and bugs update (5.0.4)
2021-05-26 20:03:09
ibm
ibm
Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities
2021-12-03 18:52:37
Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs
2021-10-19 15:38:04

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON
Related for CNVD-2022-06525
prion1talos1redhatcve1alpinelinux1ubuntucve1veracode1debiancve1cve1archlinux1mageia1openvas5nessus12oraclelinux1almalinux1gentoo1suse2osv3rocky1redhat6ibm2