CVE-2021-45482
Summary
| CVE | CVE-2021-45482 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-12-25 01:15:00 UTC |
| Updated | 2022-02-05 02:22:00 UTC |
| Description | In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889. |
Risk And Classification
Problem Types: CWE-416
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| oss-security - WebKitGTK and WPE WebKit Security Advisory WSA-2022-0001 | MLIST | www.openwall.com | |
| security_advisories/webkitgtk-2.32.3 at master · ChijinZ/security_advisories · GitHub | MISC | github.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159799 Oracle Enterprise Linux Security Update for webkit2gtk3 (ELSA-2022-1777)
- 183032 Debian Security Update for webkit2gtkwpewebkit (CVE-2021-45482)
- 240305 Red Hat Update for webkit2gtk3 security (RHSA-2022:1777)
- 296063 Oracle Solaris 11.4 Support Repository Update (SRU) 45.119.2 Missing (CPUAPR2022)
- 354436 Amazon Linux Security Advisory for webkit2gtk3 : ALAS2022-2022-015
- 355438 Amazon Linux Security Advisory for webkitgtk4 : ALAS2-2023-2088
- 502394 Alpine Linux Security Update for webkit2gtk
- 505522 Alpine Linux Security Update for webkit2gtk
- 710570 Gentoo Linux WebkitGTK+ Multiple Vulnerabilities (GLSA 202202-01)
- 751784 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2022:0703-1)
- 751790 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2022:0690-1)
- 751794 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2022:0705-1)
- 751823 OpenSUSE Security Update for webkit2gtk3 (openSUSE-SU-2022:0705-1)
- 940505 AlmaLinux Security Update for webkit2gtk3 (ALSA-2022:1777)