Webkit WebSocket code execution vulnerability

🗓️ 30 Nov 2020 00:00:00Reported by Marcin ‘Icewall’ Noga of Cisco Talos.Type

talos🔗 www.talosintelligence.com👁 71 Views

Code execution vulnerability in Webkit WebKitGTK 2.30.0 WebSocket functionality can result in remote code execution through use-after-free vulnerability triggered by a specially crafted web page

Reporter	Title	Published	Views	Family All 75
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	3 Dec 202118:52	–	ibm
Tenable Nessus	AlmaLinux 8 : GNOME (ALSA-2021:1586)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : GNOME (CESA-2021:1586)	19 May 202100:00	–	nessus
Tenable Nessus	GLSA-202012-10 : WebkitGTK+: Multiple vulnerabilities	24 Dec 202000:00	–	nessus
Tenable Nessus	MiracleLinux 8 : GNOME (AXSA:2021-2176:01)	19 Jan 202600:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 6.02 : webkit2gtk3 Multiple Vulnerabilities (NS-SA-2022-0048)	9 May 202200:00	–	nessus
Tenable Nessus	openSUSE Security Update : webkit2gtk3 (openSUSE-2020-2304)	25 Jan 202100:00	–	nessus
Tenable Nessus	openSUSE Security Update : webkit2gtk3 (openSUSE-2020-2310)	25 Jan 202100:00	–	nessus
Tenable Nessus	Oracle Linux 8 : GNOME (ELSA-2021-1586)	26 May 202100:00	–	nessus

30 Nov 2020 00:00Current

9High risk

Vulners AI Score9

CVSS 26.8

CVSS 3.18.8

CVSS 38.8

EPSS0.01488