CVE-2021-30887
Summary
| CVE | CVE-2021-30887 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-08-24 19:15:00 UTC |
| Updated | 2023-11-07 03:33:00 UTC |
| Description | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to unexpectedly unenforced Content Security Policy. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Apple | Ipados | All | All | All | All |
| Operating System | Apple | Ipad Os | All | All | All | All |
| Operating System | Apple | Iphone Os | All | All | All | All |
| Operating System | Apple | Macos | All | All | All | All |
| Operating System | Apple | Macos | 12.0 | All | All | All |
| Operating System | Apple | Tvos | All | All | All | All |
| Operating System | Apple | Watchos | All | All | All | All |
| Operating System | Debian | Debian Linux | 10.0 | All | All | All |
| Operating System | Debian | Debian Linux | 11.0 | All | All | All |
| Operating System | Fedoraproject | Fedora | 34 | All | All | All |
| Operating System | Fedoraproject | Fedora | 35 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Debian -- Security Information -- DSA-5031-1 wpewebkit | www.debian.org | ||
| [SECURITY] Fedora 34 Update: webkit2gtk3-2.34.4-1.fc34 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| About the security content of iOS 15.1 and iPadOS 15.1 - Apple Support | MISC | support.apple.com | |
| About the security content of macOS Monterey 12.0.1 - Apple Support | support.apple.com | ||
| [SECURITY] Fedora 34 Update: webkit2gtk3-2.34.4-1.fc34 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| [SECURITY] Fedora 35 Update: webkit2gtk3-2.34.4-2.fc35 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| Debian -- Security Information -- DSA-5030-1 webkit2gtk | www.debian.org | ||
| About the security content of watchOS 8.1 - Apple Support | MISC | support.apple.com | |
| About the security content of tvOS 15.1 - Apple Support | support.apple.com | ||
| [SECURITY] Fedora 35 Update: webkit2gtk3-2.34.4-2.fc35 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| oss-security - WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007 | www.openwall.com | ||
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159799 Oracle Enterprise Linux Security Update for webkit2gtk3 (ELSA-2022-1777)
- 178953 Debian Security Update for wpewebkit (DSA 5031-1)
- 178954 Debian Security Update for webkit2gtk (DSA 5030-1)
- 183194 Debian Security Update for webkit2gtkwpewebkit (CVE-2021-30887)
- 198615 Ubuntu Security Notification for WebKitGTK Vulnerabilities (USN-5213-1)
- 240305 Red Hat Update for webkit2gtk3 security (RHSA-2022:1777)
- 282274 Fedora Security Update for webkit2gtk3 (FEDORA-2022-25a98f5d55)
- 282347 Fedora Security Update for webkit2gtk3 (FEDORA-2022-f7366e60cb)
- 296063 Oracle Solaris 11.4 Support Repository Update (SRU) 45.119.2 Missing (CPUAPR2022)
- 355438 Amazon Linux Security Advisory for webkitgtk4 : ALAS2-2023-2088
- 376012 Apple MacOS Monterey 12.0.1 Not Installed (HT212869)
- 376059 Apple Safari Multiple Vulnerabilities (HT212875)
- 502396 Alpine Linux Security Update for webkit2gtk
- 610378 Apple iOS 15.1 and iPadOS 15.1 Security Update Missing (HT212867)
- 710570 Gentoo Linux WebkitGTK+ Multiple Vulnerabilities (GLSA 202202-01)
- 751623 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2022:0142-1)
- 751646 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2022:0183-1)
- 751648 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2022:0182-1)
- 751659 OpenSUSE Security Update for webkit2gtk3 (openSUSE-SU-2022:0182-1)
- 751755 OpenSUSE Security Update for webkit2gtk3 (openSUSE-SU-2022:0182-2)
- 940505 AlmaLinux Security Update for webkit2gtk3 (ALSA-2022:1777)
- 960138 Rocky Linux Security Update for webkit2gtk3 (RLSA-2022:1777)