Use-after-free in WebKitGTK+ - CVE-2020-11793

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU30304

Use-after-free in WebKitGTK+ - CVE-2020-11793

Published: April 17, 2020 / Updated: July 17, 2020


Vulnerability identifier: #VU30304
CSH Severity: High
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-11793
CWE-ID: CWE-416
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash).


Affected software

WebKitGTK+
Arch Linux
Gentoo Linux
Debian Linux
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Opensuse
Ubuntu
Fedora
Service Telemetry Framework
Quay
OpenShift Data Foundation (formerly OpenShift Container Storage)
webkit2gtk (Alpine package)
libwebkit2gtk-4.0-37 (Ubuntu package)
libjavascriptcoregtk-4.0-18 (Ubuntu package)
gnome-remote-desktop (Red Hat package)
pipewire0.2 (Red Hat package)
webrtc-audio-processing (Red Hat package)
pipewire (Red Hat package)
dleyna-renderer (Red Hat package)
LibRaw (Red Hat package)
vte291 (Red Hat package)
PackageKit (Red Hat package)
xdg-desktop-portal-gtk (Red Hat package)
xdg-desktop-portal (Red Hat package)
frei0r-plugins (Red Hat package)
potrace (Red Hat package)
gtk-doc (Red Hat package)
gvfs (Red Hat package)
tracker (Red Hat package)
webkit2gtk3
webkit2gtk3 (Red Hat package)
libsoup (Red Hat package)
gtk3 (Red Hat package)
gnome-photos (Red Hat package)
gnome-session (Red Hat package)
nautilus (Red Hat package)
gnome-control-center (Red Hat package)
gnome-terminal (Red Hat package)
pygobject3 (Red Hat package)
gdm (Red Hat package)
gsettings-desktop-schemas (Red Hat package)
gnome-settings-daemon (Red Hat package)
gnome-shell-extensions (Red Hat package)
gnome-shell (Red Hat package)
mutter (Red Hat package)
webkit2gtk (Debian package)

How to mitigate CVE-2020-11793

Install update from vendor's website.

WebKitGTK+ - update to 2.28.1
Quay - update to 3.3.3
webkit2gtk (Alpine package) - addressed in versions 2.28.1-r0, 2.28.3-r0
libwebkit2gtk-4.0-37 (Ubuntu package) - addressed in versions 2.28.1-0ubuntu0.18.04.1, 2.28.1-0ubuntu0.19.10.1
libjavascriptcoregtk-4.0-18 (Ubuntu package) - addressed in versions 2.28.1-0ubuntu0.18.04.1, 2.28.1-0ubuntu0.19.10.1
gnome-remote-desktop (Red Hat package) - update to 0.1.8-3.el8
pipewire0.2 (Red Hat package) - update to 0.2.7-6.el8
webrtc-audio-processing (Red Hat package) - update to 0.3-9.el8
pipewire (Red Hat package) - update to 0.3.6-1.el8
dleyna-renderer (Red Hat package) - update to 0.6.0-3.el8
LibRaw (Red Hat package) - update to 0.19.5-2.el8
vte291 (Red Hat package) - update to 0.52.4-2.el8
PackageKit (Red Hat package) - update to 1.1.12-6.el8
xdg-desktop-portal-gtk (Red Hat package) - update to 1.6.0-1.el8
xdg-desktop-portal (Red Hat package) - update to 1.6.0-2.el8
frei0r-plugins (Red Hat package) - update to 1.6.1-7.el8
potrace (Red Hat package) - update to 1.15-3.el8
gtk-doc (Red Hat package) - update to 1.28-2.el8
gvfs (Red Hat package) - update to 1.36.2-10.el8
tracker (Red Hat package) - update to 2.1.5-2.el8
webkit2gtk3 - addressed in versions 2.28.1-1.fc30, 2.28.1-1.fc31, 2.28.1-2.fc32, 2.28.1-3.fc30, 2.28.1-3.fc31, 2.28.1-4.fc32
webkit2gtk3 (Red Hat package) - update to 2.28.4-1.el8
libsoup (Red Hat package) - update to 2.62.3-2.el8
gtk3 (Red Hat package) - update to 3.22.30-6.el8
gnome-photos (Red Hat package) - update to 3.28.1-3.el8
gnome-session (Red Hat package) - update to 3.28.1-10.el8
nautilus (Red Hat package) - update to 3.28.1-14.el8
gnome-control-center (Red Hat package) - update to 3.28.2-22.el8
gnome-terminal (Red Hat package) - update to 3.28.3-2.el8
pygobject3 (Red Hat package) - update to 3.28.3-2.el8
gdm (Red Hat package) - update to 3.28.3-34.el8
gsettings-desktop-schemas (Red Hat package) - update to 3.32.0-5.el8
gnome-settings-daemon (Red Hat package) - update to 3.32.0-11.el8
gnome-shell-extensions (Red Hat package) - update to 3.32.1-11.el8
gnome-shell (Red Hat package) - update to 3.32.2-20.el8
mutter (Red Hat package) - update to 3.32.2-48.el8
webkit2gtk (Debian package) - update to 2.26.4-1~deb10u3

External References

Related Security Bulletins