Use-after-free in Google Chromium - CVE-2021-30560

Vulnerability identifier: #VU54903

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-30560

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error within the Blink XSLT component in Google Chrome. A remote attacker can create a specially crafted web page, trick the victim into visiting it, trigger use-after-free error and execute arbitrary code on the target system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

Google Chromium
Google Chrome
Microsoft Edge
Arch Linux
Gentoo Linux
Debian Linux
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Software Development Kit 12
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
SUSE Enterprise Storage
Fedora
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise Server 12 SP2 BCL
SUSE Linux Enterprise Server 12 SP4 ESPOS
SUSE Linux Enterprise Server 12 SP4 LTSS
Slackware Linux
Ubuntu
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Package Hub 15
Basesystem Module
openSUSE Leap
openEuler
Chrome OS
Data Lakehouse
Dell Secure Connect Gateway
IBM Watson Machine Learning Accelerator
EMC ECS
cflinuxfs3
PowerStore T
EMC Cloud Tiering Appliance
libxslt-devel
libxslt1-debuginfo-32bit
libxslt-tools-debuginfo
libxslt-debugsource
libxslt1-32bit
libxslt1-debuginfo
libxslt-tools
libxslt1
libxslt1.1 (Ubuntu package)
libxslt-python-debugsource
libxslt-python-debuginfo
libxslt-python
libxslt (Debian package)
libxslt-debuginfo
libxslt
libxslt-help
libxslt1-32bit-debuginfo
libxslt-devel-32bit
dev-libs/libxslt
qt5-qtwebengine
chromium
HPE Moonshot 1500 Chassis Manager
Dell EMC Storage Monitoring and Reporting (SMR)
EMC ViPR SRM

Update to version 91.0.4472.164.

Google Chromium - update to 91.0.4472.164
Data Lakehouse - update to 1.1.0.0
EMC ECS - update to 3.7.0.6
Dell Secure Connect Gateway - update to 5.16
Google Chrome - update to 91.0.4472.164
Microsoft Edge - update to 91.0.864.71
cflinuxfs3 - update to 0.318.0
libxslt-devel - addressed in versions 1.1.28-17.15.1, 1.1.32-150000.3.14.1, 1.1.34-150400.3.3.1
libxslt1-debuginfo-32bit - update to 1.1.28-17.15.1
libxslt-tools-debuginfo - addressed in versions 1.1.28-17.15.1, 1.1.32-150000.3.14.1, 1.1.34-150400.3.3.1
libxslt-debugsource - addressed in versions 1.1.28-17.15.1, 1.1.32-150000.3.14.1, 1.1.34-150400.3.3.1
libxslt1-32bit - addressed in versions 1.1.28-17.15.1, 1.1.34-150400.3.3.1
libxslt1-debuginfo - addressed in versions 1.1.28-17.15.1, 1.1.32-150000.3.14.1, 1.1.34-150400.3.3.1
libxslt-tools - addressed in versions 1.1.28-17.15.1, 1.1.32-150000.3.14.1, 1.1.34-150400.3.3.1
libxslt1 - addressed in versions 1.1.28-17.15.1, 1.1.32-150000.3.14.1, 1.1.34-150400.3.3.1
libxslt1.1 (Ubuntu package) - addressed in versions 1.1.29-5ubuntu0.3, 1.1.34-4ubuntu0.20.04.1, 1.1.34-4ubuntu0.22.04.1, 1.1.282.1ubuntu0.3+esm1
libxslt-python-debugsource - update to 1.1.32-150000.3.14.1
libxslt-python-debuginfo - update to 1.1.32-150000.3.14.1
libxslt-python - update to 1.1.32-150000.3.14.1
libxslt (Debian package) - update to 1.1.34-4+deb11u1
libxslt-devel - update to 1.1.34-5
libxslt-debuginfo - update to 1.1.34-5
libxslt-debugsource - update to 1.1.34-5
libxslt - update to 1.1.34-5
libxslt-help - update to 1.1.34-5
libxslt1-32bit-debuginfo - update to 1.1.34-150400.3.3.1
libxslt-devel-32bit - update to 1.1.34-150400.3.3.1
dev-libs/libxslt - update to 1.1.35
PowerStore T - update to 3.5.0.1-2083289
HPE Moonshot 1500 Chassis Manager - update to 4.0-b43
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.9.0.0
EMC ViPR SRM - update to 4.9.0.0
qt5-qtwebengine - update to 5.15.8-2.fc34
EMC Cloud Tiering Appliance - update to 13.2.0.2.22
chromium - addressed in versions 91.0.4472.164-1.el8, 91.0.4472.164-1.fc33, 91.0.4472.164-1.fc34
Chrome OS - addressed in versions 96.0.4664.215, 102.0.5005.153

• https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html
• https://crbug.com/1219209

• Multiple vulnerabilities in Google Chrome
• Arch Linux update for chromium
• Arch Linux update for vivaldi
• Multiple vulnerabilities in Microsoft Edge
• Arch Linux update for opera
• Gentoo update for Chromium, Google Chrome
• Slackware Linux update for libxslt
• Multiple vulnerabilities in Google ChromeOS
• Multiple vulnerabilities in Google Chrome OS LTS
• Ubuntu update for libxslt
• Ubuntu update for libxslt
• Cloud Foundry Foundation cflinuxfs3 update for Libxslt
• Debian update for libxslt
• SUSE update for libxslt
• SUSE update for libxslt
• SUSE update for libxslt
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Multiple vulnerabilities in Dell EMC SRM and Dell EMC Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Dell Secure Connect Gateway
• Multiple vulnerabilities in Dell ECS
• Multiple vulnerabilities in Dell PowerStore Family
• Gentoo update for libxslt
• Multiple vulnerabilities in Watson Machine Learning Accelerator on Cloud Pak for Data
• openEuler update for libxslt
• Multiple vulnerabilities in Dell Data Lakehouse System Software
• Multiple vulnerabilities in HPE Moonshot 1500 Chassis Manager
• Fedora 34 update for chromium
• Fedora 33 update for chromium
• Fedora EPEL 8 update for chromium
• Fedora 34 update for qt5-qtwebengine