Lucene search
Veracode Vulnerability DatabaseVERACODE:29888HistoryApr 05, 2021 - 3:36 a.m.
Remote Code Execution (RCE)
2021-04-0503:36:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
21
remote code execution
webkit2gtk
use after free
vulnerability
software
EPSS
0.006
Percentile
79.4%
webkit2gtk is vulnerable to remote code execution. The vulnerability exists due to a use after free issue.
Affected configurations
Node
-webkit2gtk\Match3.132.30.5-r0
OR-webkit2gtk\Matchedge2.28.0-r0
OR-webkit2gtk\Matchedge2.28.1-r0
OR-webkit2gtk\Matchedge2.30.6-r0
OR-webkit2gtk\Matchedge2.28.0-r1
OR-webkit2gtk\Matchedge2.28.0-r2
OR-webkit2gtk\Matchedge2.28.2-r0
OR-webkit2gtk\Matchedge2.30.5-r0
OR-webkit2gtk\Matchedge2.26.4-r3
ORgnomegnome-autoarMatch0.2.3_1.el8
ORgnomegnome-shellMatch3.32.2_35.el8
ORgnomegnome-shellMatch3.32.2_33.el8
ORgnomegnome-shellMatch3.32.2_21.el8
ORgnomegnome-shellMatch3.32.2_27.el8
ORgnomegnome-shellMatch3.32.2_24.el8
ORgnomegnome-shellMatch3.32.2_36.el8
ORgnomegnome-shellMatch3.32.2_20.el8
ORgnomegnome-shellMatch3.32.2_16.el8
ORgnomegnome-shellMatch3.32.2_19.el8
ORgnomegnome-shellMatch3.32.2_30.el8
ORgnomegnome-shellMatch3.32.2_39.el8
ORgnomegnome-shellMatch3.28.3_10.el8
ORgnomegnome-shellMatch3.32.2_38.el8
ORgnomegnome-shellMatch3.32.2_14.el8
ORgnomegnome-shellMatch3.32.2_9.el8
ORgnomegnome-shellMatch3.32.2_34.el8
ORgnomegnome-shellMatch3.32.2_29.el8
ORgdmMatch3.28.3_34.el8
ORgdmMatch3.28.3_22.el8
ORgdmMatch40.0_12.el8
ORgdmMatch3.28.3_35.el8
ORgdmMatch3.28.3_29.el8
ORgdmMatch40.0_13.el8
ORgdmMatch3.28.3_39.el8
ORgdmMatch3.28.3_37.el8
ORgdmMatch40.0_3.el8
ORgdmMatch40.0_2.el8
ORgdmMatch3.28.3_20.el8
OR-gsettings-desktop-schemasMatch3.28.1_1.el8
OR-gsettings-desktop-schemasMatch3.32.0_3.el8
OR-gsettings-desktop-schemasMatch3.32.0_4.el8
OR-gsettings-desktop-schemasMatch3.32.0_5.el8
OR-webkit2gtk3Match2.22.6_1.el8
ORgnomegnome-sessionMatch3.28.1_10.el8
ORgnomegnome-sessionMatch3.28.1_9.el8
ORgnomegnome-sessionMatch3.28.1_10.el8_4.1
ORgnomegnome-sessionMatch3.28.1_7.el8_1
ORgnomegnome-sessionMatch3.28.1_6.el8
ORgnomegnome-sessionMatch3.28.1_8.el8
ORlibrawlibrawMatch0.19.5_2.el8
ORlibrawlibrawMatch0.19.1_1.el8
ORlibrawlibrawMatch0.19.5_1.el8
ORgnomecontrol_centerMatch3.28.2_4.el8
ORgnomecontrol_centerMatch3.28.2_22.el8
ORgnomecontrol_centerMatch3.28.2_27.el8
ORgnomecontrol_centerMatch3.28.2_21.el8
ORgnomecontrol_centerMatch3.28.2_24.el8
ORgnomecontrol_centerMatch3.28.2_5.el8
ORgnomecontrol_centerMatch3.28.2_26.el8
ORgnomecontrol_centerMatch3.28.2_19.el8
OR-mutterMatch3.32.2_54.el8
OR-mutterMatch3.32.2_48.el8
OR-mutterMatch3.32.2_36.el8_2
OR-mutterMatch3.28.3_19.el8_0
OR-mutterMatch3.32.2_37.el8
OR-mutterMatch3.32.2_12.el8_1
OR-mutterMatch3.32.2_36.el8
OR-mutterMatch3.32.2_47.el8
OR-mutterMatch3.28.3_18.el8
OR-mutterMatch3.32.2_49.el8
OR-mutterMatch3.32.2_35.el8_2
OR-mutterMatch3.32.2_57.el8
OR-mutterMatch3.32.2_50.el8
OR-mutterMatch3.32.2_55.el8
OR-mutterMatch3.32.2_53.el8
OR-mutterMatch3.32.2_10.el8
OR-mutterMatch3.32.2_45.el8
OR-mutterMatch3.32.2_51.el8
OR-mutterMatch3.32.2_34.el8
OR-mutterMatch3.32.2_11.el8_1
OR-vinoMatch3.22.0_10.el8
OR-gtk3Match3.22.30_3.el8
OR-gtk3Match3.22.30_5.el8
OR-gtk3Match3.22.30_6.el8
OR-gtk3Match3.22.30_4.el8
ORgnomegnome_online_accountsMatch3.28.0_1.el8
ORgnomegnome_online_accountsMatch3.28.2_2.el8
ORgnomegnome_online_accountsMatch3.28.2_1.el8
OR-accountsserviceMatch0.6.50_6.el8
OR-accountsserviceMatch0.6.50_8.el8
OR-accountsserviceMatch0.6.50_7.el8
OR-accountsserviceMatch0.6.55_1.el8
OR-gnome-calculatorMatch3.28.2_1.el8
ORgnomelibgtop_daemonMatch3.32.0_9.el8
ORgnomelibgtop_daemonMatch3.32.0_14.el8
ORgnomelibgtop_daemonMatch3.32.0_13.el8
ORgnomelibgtop_daemonMatch3.32.0_11.el8
ORgnomelibgtop_daemonMatch3.32.0_15.el8
ORgnomelibgtop_daemonMatch3.32.0_12.el8
ORgnomelibgtop_daemonMatch3.32.0_4.el8
ORgnomelibgtop_daemonMatch3.32.0_9.el8.0.1
ORgnomelibgtop_daemonMatch3.28.1_2.el8
OR-gnome-softwareMatch3.36.1_9.el8
OR-gnome-softwareMatch3.30.6_1.el8
OR-gnome-softwareMatch3.36.1_5.el8
OR-gnome-softwareMatch3.30.6_3.el8
OR-gnome-softwareMatch3.30.6_2.el8
OR-gnome-softwareMatch3.36.1_4.el8
OR-gnome-softwareMatch3.36.1_8.el8
OR-webkit2gtk\Match3.132.30.5-r0
OR-webkit2gtk\Matchedge2.28.0-r0
OR-webkit2gtk\Matchedge2.28.1-r0
OR-webkit2gtk\Matchedge2.30.6-r0
OR-webkit2gtk\Matchedge2.28.0-r1
OR-webkit2gtk\Matchedge2.28.0-r2
OR-webkit2gtk\Matchedge2.28.2-r0
OR-webkit2gtk\Matchedge2.30.5-r0
OR-webkit2gtk\Matchedge2.26.4-r3
ORgnomegnome-autoarMatch0.2.3_1.el8
ORgnomegnome-shellMatch3.32.2_35.el8
ORgnomegnome-shellMatch3.32.2_33.el8
ORgnomegnome-shellMatch3.32.2_21.el8
ORgnomegnome-shellMatch3.32.2_27.el8
ORgnomegnome-shellMatch3.32.2_24.el8
ORgnomegnome-shellMatch3.32.2_36.el8
ORgnomegnome-shellMatch3.32.2_20.el8
ORgnomegnome-shellMatch3.32.2_16.el8
ORgnomegnome-shellMatch3.32.2_19.el8
ORgnomegnome-shellMatch3.32.2_30.el8
ORgnomegnome-shellMatch3.32.2_39.el8
ORgnomegnome-shellMatch3.28.3_10.el8
ORgnomegnome-shellMatch3.32.2_38.el8
ORgnomegnome-shellMatch3.32.2_14.el8
ORgnomegnome-shellMatch3.32.2_9.el8
ORgnomegnome-shellMatch3.32.2_34.el8
ORgnomegnome-shellMatch3.32.2_29.el8
ORgdmMatch3.28.3_34.el8
ORgdmMatch3.28.3_22.el8
ORgdmMatch40.0_12.el8
ORgdmMatch3.28.3_35.el8
ORgdmMatch3.28.3_29.el8
ORgdmMatch40.0_13.el8
ORgdmMatch3.28.3_39.el8
ORgdmMatch3.28.3_37.el8
ORgdmMatch40.0_3.el8
ORgdmMatch40.0_2.el8
ORgdmMatch3.28.3_20.el8
OR-gsettings-desktop-schemasMatch3.28.1_1.el8
OR-gsettings-desktop-schemasMatch3.32.0_3.el8
OR-gsettings-desktop-schemasMatch3.32.0_4.el8
OR-gsettings-desktop-schemasMatch3.32.0_5.el8
OR-webkit2gtk3Match2.22.6_1.el8
ORgnomegnome-sessionMatch3.28.1_10.el8
ORgnomegnome-sessionMatch3.28.1_9.el8
ORgnomegnome-sessionMatch3.28.1_10.el8_4.1
ORgnomegnome-sessionMatch3.28.1_7.el8_1
ORgnomegnome-sessionMatch3.28.1_6.el8
ORgnomegnome-sessionMatch3.28.1_8.el8
ORlibrawlibrawMatch0.19.5_2.el8
ORlibrawlibrawMatch0.19.1_1.el8
ORlibrawlibrawMatch0.19.5_1.el8
ORgnomecontrol_centerMatch3.28.2_4.el8
ORgnomecontrol_centerMatch3.28.2_22.el8
ORgnomecontrol_centerMatch3.28.2_27.el8
ORgnomecontrol_centerMatch3.28.2_21.el8
ORgnomecontrol_centerMatch3.28.2_24.el8
ORgnomecontrol_centerMatch3.28.2_5.el8
ORgnomecontrol_centerMatch3.28.2_26.el8
ORgnomecontrol_centerMatch3.28.2_19.el8
OR-mutterMatch3.32.2_54.el8
OR-mutterMatch3.32.2_48.el8
OR-mutterMatch3.32.2_36.el8_2
OR-mutterMatch3.28.3_19.el8_0
OR-mutterMatch3.32.2_37.el8
OR-mutterMatch3.32.2_12.el8_1
OR-mutterMatch3.32.2_36.el8
OR-mutterMatch3.32.2_47.el8
OR-mutterMatch3.28.3_18.el8
OR-mutterMatch3.32.2_49.el8
OR-mutterMatch3.32.2_35.el8_2
OR-mutterMatch3.32.2_57.el8
OR-mutterMatch3.32.2_50.el8
OR-mutterMatch3.32.2_55.el8
OR-mutterMatch3.32.2_53.el8
OR-mutterMatch3.32.2_10.el8
OR-mutterMatch3.32.2_45.el8
OR-mutterMatch3.32.2_51.el8
OR-mutterMatch3.32.2_34.el8
OR-mutterMatch3.32.2_11.el8_1
OR-vinoMatch3.22.0_10.el8
OR-gtk3Match3.22.30_3.el8
OR-gtk3Match3.22.30_5.el8
OR-gtk3Match3.22.30_6.el8
OR-gtk3Match3.22.30_4.el8
ORgnomegnome_online_accountsMatch3.28.0_1.el8
ORgnomegnome_online_accountsMatch3.28.2_2.el8
ORgnomegnome_online_accountsMatch3.28.2_1.el8
OR-accountsserviceMatch0.6.50_6.el8
OR-accountsserviceMatch0.6.50_8.el8
OR-accountsserviceMatch0.6.50_7.el8
OR-accountsserviceMatch0.6.55_1.el8
OR-gnome-calculatorMatch3.28.2_1.el8
ORgnomelibgtop_daemonMatch3.32.0_9.el8
ORgnomelibgtop_daemonMatch3.32.0_14.el8
ORgnomelibgtop_daemonMatch3.32.0_13.el8
ORgnomelibgtop_daemonMatch3.32.0_11.el8
ORgnomelibgtop_daemonMatch3.32.0_15.el8
ORgnomelibgtop_daemonMatch3.32.0_12.el8
ORgnomelibgtop_daemonMatch3.32.0_4.el8
ORgnomelibgtop_daemonMatch3.32.0_9.el8.0.1
ORgnomelibgtop_daemonMatch3.28.1_2.el8
OR-gnome-softwareMatch3.36.1_9.el8
OR-gnome-softwareMatch3.30.6_1.el8
OR-gnome-softwareMatch3.36.1_5.el8
OR-gnome-softwareMatch3.30.6_3.el8
OR-gnome-softwareMatch3.30.6_2.el8
OR-gnome-softwareMatch3.36.1_4.el8
OR-gnome-softwareMatch3.36.1_8.el8
| Vendor | Product | Version | CPE |
|---|---|---|---|
| - | webkit2gtk\ | 3.13 | cpe:2.3:a:-:webkit2gtk\:3.13:2.30.5-r0:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.28.0-r0:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.28.1-r0:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.30.6-r0:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.28.0-r1:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.28.0-r2:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.28.2-r0:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.30.5-r0:*:*:*:*:*:*:* |
| - | webkit2gtk\ | edge | cpe:2.3:a:-:webkit2gtk\:edge:2.26.4-r3:*:*:*:*:*:*:* |
| gnome | gnome-autoar | 0.2.3_1.el8 | cpe:2.3:a:gnome:gnome-autoar:0.2.3_1.el8:*:*:*:*:*:*:* |
References
lists.fedoraproject.org/archives/list/[email protected]/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/
secdb.alpinelinux.org/v3.13/community.yaml
support.apple.com/en-us/HT212146
support.apple.com/en-us/HT212147
support.apple.com/en-us/HT212148
support.apple.com/en-us/HT212149
support.apple.com/en-us/HT212152
www.debian.org/security/2021/dsa-4923
Related
alpinelinux
alpinelinux
CVE-2021-1788
2021-04-02 18:15:21
nvd
nvd
CVE-2021-1788
2021-04-02 18:15:21
debiancve
debiancve
CVE-2021-1788
2021-04-02 18:15:21
cvelist
cvelist
CVE-2021-1788
2021-04-02 18:00:45
redhatcve
redhatcve
CVE-2021-1788
2021-03-30 20:27:07
prion
prion
Design/Logic Flaw
2021-04-02 18:15:00
ubuntucve
ubuntucve
CVE-2021-1788
2021-04-02 00:00:00
cve
cve
CVE-2021-1788
2021-04-02 18:15:21
apple
apple
About the security content of Safari 14.0.3 - Apple Support
2021-02-02 01:16:45
About the security content of Safari 14.0.3
2021-02-01 00:00:00
About the security content of watchOS 7.3 - Apple Support
2021-02-01 06:39:19
nessus
nessus
Debian DSA-4923-1 : webkit2gtk - security update
2021-06-01 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : WebKitGTK vulnerabilities (USN-4939-1)
2021-05-12 00:00:00
SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2021:1430-1)
2021-04-30 00:00:00
ubuntu
ubuntu
WebKitGTK vulnerabilities
2021-05-10 00:00:00
osv
osv
webkit2gtk vulnerabilities
2021-05-10 11:40:30
webkit2gtk - security update
2021-05-30 00:00:00
Red Hat Security Advisory: GNOME security, bug fix, and enhancement update
2024-09-16 05:48:15
openvas
openvas
Ubuntu: Security Advisory (USN-4939-1)
2021-05-11 00:00:00
Debian: Security Advisory (DSA-4923-1)
2021-05-31 00:00:00
Fedora: Security Advisory for webkit2gtk3 (FEDORA-2021-864dc37032)
2021-04-04 00:00:00
debian
debian
[SECURITY] [DSA 4923-1] webkit2gtk security update
2021-05-30 15:49:51
fedora
fedora
[SECURITY] Fedora 34 Update: webkit2gtk3-2.32.0-1.fc34
2021-03-29 00:18:51
[SECURITY] Fedora 33 Update: webkit2gtk3-2.32.0-1.fc33
2021-04-04 01:09:35
suse
suse
Security update for webkit2gtk3 (important)
2021-05-01 00:00:00
Security update for webkit2gtk3 (important)
2022-02-17 00:00:00
Security update for webkit2gtk3 (important)
2022-01-25 00:00:00
mageia
mageia
Updated webkit2 packages fix security vulnerabilities
2021-04-12 22:59:59
rocky
rocky
GNOME security, bug fix, and enhancement update
2021-11-09 09:15:15
oraclelinux
oraclelinux
GNOME security, bug fix, and enhancement update
2021-11-16 00:00:00
redhat
redhat
almalinux
almalinux
Moderate: GNOME security, bug fix, and enhancement update
2021-11-09 09:15:15
gentoo
gentoo
WebkitGTK+: Multiple vulnerabilities
2022-02-01 00:00:00
amazon
amazon
Important: webkitgtk4
2023-06-07 23:52:00
Important: webkitgtk4
2023-06-07 23:52:00
ibm
ibm