kritisch
CVE-2024-4558
chromium-browser: Use after free in ANGLE
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Red Hat7.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Red Hat (hoch), AlmaLinux (hoch), Oracle (hoch), Rocky Linux (hoch), Ubuntu (mittel).
Beschreibung
Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| alma 8 | webkit2gtk3, webkit2gtk3-devel, webkit2gtk3-jsc und 1 weitere | 2.46.3-1.el8_10 |
| alma 9 | webkit2gtk3, webkit2gtk3-devel, webkit2gtk3-jsc und 1 weitere | 2.44.3-2.el9 |
| alpine 3.19 | qt6-qtwebengine | 6.6.1-r12 |
| alpine 3.20 | qt5-qtwebengine, qt6-qtwebengine | 5.15.16-r9 und 1 weitere |
| alpine 3.21 | qt5-qtwebengine, qt6-qtwebengine | 5.15.17-r0 und 1 weitere |
| alpine 3.22 | qt5-qtwebengine, qt6-qtwebengine | 5.15.17-r0 und 1 weitere |
| alpine 3.23 | qt5-qtwebengine, qt6-qtwebengine | 5.15.17-r0 und 1 weitere |
| alpine 3.24 | qt6-qtwebengine | 6.6.3-r4 |
| alpine edge | qt6-qtwebengine | 6.6.3-r4 |
| chainguard | chromium | 124.0.6367.155-r0 |
| debian 10 | chromium | kein Fix angegeben |
| debian 11 | chromium, webkit2gtk, wpewebkit | 2.44.3-1~deb11u1 |
Alle 65 Einträge aus 30 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| alma 8 | webkit2gtk3 | 2.46.3-1.el8_10 |
| alma 8 | webkit2gtk3-devel | 2.46.3-1.el8_10 |
| alma 8 | webkit2gtk3-jsc | 2.46.3-1.el8_10 |
| alma 8 | webkit2gtk3-jsc-devel | 2.46.3-1.el8_10 |
| alma 9 | webkit2gtk3 | 2.44.3-2.el9 |
| alma 9 | webkit2gtk3-devel | 2.44.3-2.el9 |
| alma 9 | webkit2gtk3-jsc | 2.44.3-2.el9 |
| alma 9 | webkit2gtk3-jsc-devel | 2.44.3-2.el9 |
| alpine 3.19 | qt6-qtwebengine | 6.6.1-r12 |
| alpine 3.20 | qt5-qtwebengine | 5.15.16-r9 |
| alpine 3.20 | qt6-qtwebengine | 6.6.3-r4 |
| alpine 3.21 | qt5-qtwebengine | 5.15.17-r0 |
| alpine 3.21 | qt6-qtwebengine | 6.6.3-r4 |
| alpine 3.22 | qt5-qtwebengine | 5.15.17-r0 |
| alpine 3.22 | qt6-qtwebengine | 6.6.3-r4 |
| alpine 3.23 | qt5-qtwebengine | 5.15.17-r0 |
| alpine 3.23 | qt6-qtwebengine | 6.6.3-r4 |
| alpine 3.24 | qt6-qtwebengine | 6.6.3-r4 |
| alpine edge | qt6-qtwebengine | 6.6.3-r4 |
| chainguard | chromium | 124.0.6367.155-r0 |
| debian 10 | chromium | kein Fix angegeben |
| debian 11 | chromium | kein Fix angegeben |
| debian 11 | webkit2gtk | 2.44.3-1~deb11u1 |
| debian 11 | wpewebkit | kein Fix angegeben |
| debian 12 | chromium | 124.0.6367.155-1~deb12u1 |
| debian 12 | webkit2gtk | 2.44.3-1~deb12u1 |
| debian 12 | wpewebkit | kein Fix angegeben |
| debian 13 | chromium | 124.0.6367.155-1 |
| debian 13 | webkit2gtk | 2.44.3-1 |
| debian 13 | wpewebkit | 2.44.3-1 |
| debian 14 | chromium | 124.0.6367.155-1 |
| debian 14 | webkit2gtk | 2.44.3-1 |
| debian 14 | wpewebkit | 2.44.3-1 |
| echo | chromium | 124.0.6367.155-1~deb12u1 |
| echo | webkit2gtk | 2.44.3-1~deb12u1 |
| echo | wpewebkit | 2.44.3-1 |
| Oracle Linux 8 | webkit2gtk3 | 2.46.3-1.el8_10 |
| Oracle Linux 8 | webkit2gtk3-devel | 2.46.3-1.el8_10 |
| Oracle Linux 8 | webkit2gtk3-jsc | 2.46.3-1.el8_10 |
| Oracle Linux 8 | webkit2gtk3-jsc-devel | 2.46.3-1.el8_10 |
| Oracle Linux 9 | webkit2gtk3 | 2.44.3-2.el9 |
| Oracle Linux 9 | webkit2gtk3-devel | 2.44.3-2.el9 |
| Oracle Linux 9 | webkit2gtk3-jsc | 2.44.3-2.el9 |
| Oracle Linux 9 | webkit2gtk3-jsc-devel | 2.44.3-2.el9 |
| rapidfort alpine 3.21 | qt5-qtwebengine | 5.15.17-r0 |
| rapidfort alpine 3.22 | qt5-qtwebengine | 5.15.17-r0 |
| rapidfort alpine 3.23 | qt5-qtwebengine | 5.15.17-r0 |
| rapidfort alpine 3.24 | qt5-qtwebengine | 5.15.17-r0 |
| rapidfort debian 12 | wpewebkit | 0:2.44.3-1 |
| rapidfort debian 13 | wpewebkit | 0:2.44.3-1 |
| rapidfort Oracle Linux 9 | webkit2gtk3 | 0:2.44.3-2.el9 |
| rapidfort Oracle Linux 9 | webkit2gtk3-devel | 0:2.44.3-2.el9 |
| rapidfort Oracle Linux 9 | webkit2gtk3-jsc | 0:2.44.3-2.el9 |
| rapidfort Oracle Linux 9 | webkit2gtk3-jsc-devel | 0:2.44.3-2.el9 |
| Red Hat | libwebkit2gtk | kein Fix angegeben |
| Red Hat | webkitgtk3 | kein Fix angegeben |
| Red Hat | webkitgtk3-devel | kein Fix angegeben |
| Red Hat | webkitgtk3-doc | kein Fix angegeben |
| rocky 8 | webkit2gtk3 | 2.46.3-1.el8_10 |
| rocky 8 | webkit2gtk3-devel | 2.46.3-1.el8_10 |
| rocky 8 | webkit2gtk3-jsc | 2.46.3-1.el8_10 |
| rocky 8 | webkit2gtk3-jsc-devel | 2.46.3-1.el8_10 |
| ubuntu 22.04 | webkit2gtk | 2.44.3-0ubuntu0.22.04.1 |
| ubuntu 24.04 | webkit2gtk | 2.44.3-0ubuntu0.24.04.1 |
| wolfi | chromium | 124.0.6367.155-r0 |
Referenzen
- http://seclists.org/fulldisclosure/2024/Jul/15
- http://seclists.org/fulldisclosure/2024/Jul/16
- http://seclists.org/fulldisclosure/2024/Jul/18
- https://access.redhat.com/errata/RHSA-2024:9144
- https://access.redhat.com/errata/RHSA-2024:9636
- https://access.redhat.com/security/cve/CVE-2024-4558
- https://bugzilla.redhat.com/2271717
- https://bugzilla.redhat.com/2271718
Alle 57 Referenzen
- https://bugzilla.redhat.com/2271719
- https://bugzilla.redhat.com/2279689
- https://bugzilla.redhat.com/show_bug.cgi?id=2279689
- https://bugzilla.redhat.com/show_bug.cgi?id=2302067
- https://bugzilla.redhat.com/show_bug.cgi?id=2302069
- https://bugzilla.redhat.com/show_bug.cgi?id=2302070
- https://bugzilla.redhat.com/show_bug.cgi?id=2302071
- https://bugzilla.redhat.com/show_bug.cgi?id=2312724
- https://bugzilla.redhat.com/show_bug.cgi?id=2314696
- https://bugzilla.redhat.com/show_bug.cgi?id=2314698
- https://bugzilla.redhat.com/show_bug.cgi?id=2314702
- https://bugzilla.redhat.com/show_bug.cgi?id=2314704
- https://bugzilla.redhat.com/show_bug.cgi?id=2314706
- https://bugzilla.redhat.com/show_bug.cgi?id=2323263
- https://bugzilla.redhat.com/show_bug.cgi?id=2323278
- https://bugzilla.redhat.com/show_bug.cgi?id=2323289
- https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_7.html
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23271
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27820
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27838
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27851
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40779
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40780
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40782
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40789
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40866
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44185
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44187
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44244
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44296
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4558
- https://errata.almalinux.org/9/ALSA-2024-9144.html
- https://errata.rockylinux.org/RLSA-2024:9636
- https://issues.chromium.org/issues/337766133
- https://linux.oracle.com/cve/CVE-2024-4558.html
- https://linux.oracle.com/errata/ELSA-2024-9636.html
- https://lists.debian.org/debian-lts-announce/2024/09/msg00006.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BWFSZNNWSQYDRYKNLBDGEXXKMBXDYQ3F/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FAWEKDQTHPN7NFEMLIWP7YMIZ2DHF36N/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/
- https://nvd.nist.gov/vuln/detail/CVE-2024-4558
- https://support.apple.com/kb/HT214117
- https://support.apple.com/kb/HT214119
- https://support.apple.com/kb/HT214121
- https://ubuntu.com/security/notices/USN-6996-1
- https://www.cve.org/CVERecord?id=CVE-2024-4558