crítica
CVE-2024-4558
chromium-browser: Use after free in ANGLE
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Red Hat7.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Red Hat (alta), AlmaLinux (alta), Oracle (alta), Rocky Linux (alta), Ubuntu (media).
Descripción
Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| alma 8 | webkit2gtk3, webkit2gtk3-devel, webkit2gtk3-jsc y 1 más | 2.46.3-1.el8_10 |
| alma 9 | webkit2gtk3, webkit2gtk3-devel, webkit2gtk3-jsc y 1 más | 2.44.3-2.el9 |
| alpine 3.19 | qt6-qtwebengine | 6.6.1-r12 |
| alpine 3.20 | qt5-qtwebengine, qt6-qtwebengine | 5.15.16-r9 y 1 más |
| alpine 3.21 | qt5-qtwebengine, qt6-qtwebengine | 5.15.17-r0 y 1 más |
| alpine 3.22 | qt5-qtwebengine, qt6-qtwebengine | 5.15.17-r0 y 1 más |
| alpine 3.23 | qt5-qtwebengine, qt6-qtwebengine | 5.15.17-r0 y 1 más |
| alpine 3.24 | qt6-qtwebengine | 6.6.3-r4 |
| alpine edge | qt6-qtwebengine | 6.6.3-r4 |
| chainguard | chromium | 124.0.6367.155-r0 |
| debian 10 | chromium | sin corrección indicada |
| debian 11 | chromium, webkit2gtk, wpewebkit | 2.44.3-1~deb11u1 |
Mostrar las 65 entradas de 30 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| alma 8 | webkit2gtk3 | 2.46.3-1.el8_10 |
| alma 8 | webkit2gtk3-devel | 2.46.3-1.el8_10 |
| alma 8 | webkit2gtk3-jsc | 2.46.3-1.el8_10 |
| alma 8 | webkit2gtk3-jsc-devel | 2.46.3-1.el8_10 |
| alma 9 | webkit2gtk3 | 2.44.3-2.el9 |
| alma 9 | webkit2gtk3-devel | 2.44.3-2.el9 |
| alma 9 | webkit2gtk3-jsc | 2.44.3-2.el9 |
| alma 9 | webkit2gtk3-jsc-devel | 2.44.3-2.el9 |
| alpine 3.19 | qt6-qtwebengine | 6.6.1-r12 |
| alpine 3.20 | qt5-qtwebengine | 5.15.16-r9 |
| alpine 3.20 | qt6-qtwebengine | 6.6.3-r4 |
| alpine 3.21 | qt5-qtwebengine | 5.15.17-r0 |
| alpine 3.21 | qt6-qtwebengine | 6.6.3-r4 |
| alpine 3.22 | qt5-qtwebengine | 5.15.17-r0 |
| alpine 3.22 | qt6-qtwebengine | 6.6.3-r4 |
| alpine 3.23 | qt5-qtwebengine | 5.15.17-r0 |
| alpine 3.23 | qt6-qtwebengine | 6.6.3-r4 |
| alpine 3.24 | qt6-qtwebengine | 6.6.3-r4 |
| alpine edge | qt6-qtwebengine | 6.6.3-r4 |
| chainguard | chromium | 124.0.6367.155-r0 |
| debian 10 | chromium | sin corrección indicada |
| debian 11 | chromium | sin corrección indicada |
| debian 11 | webkit2gtk | 2.44.3-1~deb11u1 |
| debian 11 | wpewebkit | sin corrección indicada |
| debian 12 | chromium | 124.0.6367.155-1~deb12u1 |
| debian 12 | webkit2gtk | 2.44.3-1~deb12u1 |
| debian 12 | wpewebkit | sin corrección indicada |
| debian 13 | chromium | 124.0.6367.155-1 |
| debian 13 | webkit2gtk | 2.44.3-1 |
| debian 13 | wpewebkit | 2.44.3-1 |
| debian 14 | chromium | 124.0.6367.155-1 |
| debian 14 | webkit2gtk | 2.44.3-1 |
| debian 14 | wpewebkit | 2.44.3-1 |
| echo | chromium | 124.0.6367.155-1~deb12u1 |
| echo | webkit2gtk | 2.44.3-1~deb12u1 |
| echo | wpewebkit | 2.44.3-1 |
| Oracle Linux 8 | webkit2gtk3 | 2.46.3-1.el8_10 |
| Oracle Linux 8 | webkit2gtk3-devel | 2.46.3-1.el8_10 |
| Oracle Linux 8 | webkit2gtk3-jsc | 2.46.3-1.el8_10 |
| Oracle Linux 8 | webkit2gtk3-jsc-devel | 2.46.3-1.el8_10 |
| Oracle Linux 9 | webkit2gtk3 | 2.44.3-2.el9 |
| Oracle Linux 9 | webkit2gtk3-devel | 2.44.3-2.el9 |
| Oracle Linux 9 | webkit2gtk3-jsc | 2.44.3-2.el9 |
| Oracle Linux 9 | webkit2gtk3-jsc-devel | 2.44.3-2.el9 |
| rapidfort alpine 3.21 | qt5-qtwebengine | 5.15.17-r0 |
| rapidfort alpine 3.22 | qt5-qtwebengine | 5.15.17-r0 |
| rapidfort alpine 3.23 | qt5-qtwebengine | 5.15.17-r0 |
| rapidfort alpine 3.24 | qt5-qtwebengine | 5.15.17-r0 |
| rapidfort debian 12 | wpewebkit | 0:2.44.3-1 |
| rapidfort debian 13 | wpewebkit | 0:2.44.3-1 |
| rapidfort Oracle Linux 9 | webkit2gtk3 | 0:2.44.3-2.el9 |
| rapidfort Oracle Linux 9 | webkit2gtk3-devel | 0:2.44.3-2.el9 |
| rapidfort Oracle Linux 9 | webkit2gtk3-jsc | 0:2.44.3-2.el9 |
| rapidfort Oracle Linux 9 | webkit2gtk3-jsc-devel | 0:2.44.3-2.el9 |
| Red Hat | libwebkit2gtk | sin corrección indicada |
| Red Hat | webkitgtk3 | sin corrección indicada |
| Red Hat | webkitgtk3-devel | sin corrección indicada |
| Red Hat | webkitgtk3-doc | sin corrección indicada |
| rocky 8 | webkit2gtk3 | 2.46.3-1.el8_10 |
| rocky 8 | webkit2gtk3-devel | 2.46.3-1.el8_10 |
| rocky 8 | webkit2gtk3-jsc | 2.46.3-1.el8_10 |
| rocky 8 | webkit2gtk3-jsc-devel | 2.46.3-1.el8_10 |
| ubuntu 22.04 | webkit2gtk | 2.44.3-0ubuntu0.22.04.1 |
| ubuntu 24.04 | webkit2gtk | 2.44.3-0ubuntu0.24.04.1 |
| wolfi | chromium | 124.0.6367.155-r0 |
Referencias
- http://seclists.org/fulldisclosure/2024/Jul/15
- http://seclists.org/fulldisclosure/2024/Jul/16
- http://seclists.org/fulldisclosure/2024/Jul/18
- https://access.redhat.com/errata/RHSA-2024:9144
- https://access.redhat.com/errata/RHSA-2024:9636
- https://access.redhat.com/security/cve/CVE-2024-4558
- https://bugzilla.redhat.com/2271717
- https://bugzilla.redhat.com/2271718
Las 57 referencias
- https://bugzilla.redhat.com/2271719
- https://bugzilla.redhat.com/2279689
- https://bugzilla.redhat.com/show_bug.cgi?id=2279689
- https://bugzilla.redhat.com/show_bug.cgi?id=2302067
- https://bugzilla.redhat.com/show_bug.cgi?id=2302069
- https://bugzilla.redhat.com/show_bug.cgi?id=2302070
- https://bugzilla.redhat.com/show_bug.cgi?id=2302071
- https://bugzilla.redhat.com/show_bug.cgi?id=2312724
- https://bugzilla.redhat.com/show_bug.cgi?id=2314696
- https://bugzilla.redhat.com/show_bug.cgi?id=2314698
- https://bugzilla.redhat.com/show_bug.cgi?id=2314702
- https://bugzilla.redhat.com/show_bug.cgi?id=2314704
- https://bugzilla.redhat.com/show_bug.cgi?id=2314706
- https://bugzilla.redhat.com/show_bug.cgi?id=2323263
- https://bugzilla.redhat.com/show_bug.cgi?id=2323278
- https://bugzilla.redhat.com/show_bug.cgi?id=2323289
- https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_7.html
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23271
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27820
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27838
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27851
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40779
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40780
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40782
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40789
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40866
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44185
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44187
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44244
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44296
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4558
- https://errata.almalinux.org/9/ALSA-2024-9144.html
- https://errata.rockylinux.org/RLSA-2024:9636
- https://issues.chromium.org/issues/337766133
- https://linux.oracle.com/cve/CVE-2024-4558.html
- https://linux.oracle.com/errata/ELSA-2024-9636.html
- https://lists.debian.org/debian-lts-announce/2024/09/msg00006.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BWFSZNNWSQYDRYKNLBDGEXXKMBXDYQ3F/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FAWEKDQTHPN7NFEMLIWP7YMIZ2DHF36N/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/
- https://nvd.nist.gov/vuln/detail/CVE-2024-4558
- https://support.apple.com/kb/HT214117
- https://support.apple.com/kb/HT214119
- https://support.apple.com/kb/HT214121
- https://ubuntu.com/security/notices/USN-6996-1
- https://www.cve.org/CVERecord?id=CVE-2024-4558