kritik
CVE-2024-4558
chromium-browser: Use after free in ANGLE
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
NVD9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Red Hat7.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Red Hat (yüksek), AlmaLinux (yüksek), Oracle (yüksek), Rocky Linux (yüksek), Ubuntu (orta).
Açıklama
Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| alma 8 | webkit2gtk3, webkit2gtk3-devel, webkit2gtk3-jsc ve 1 tane daha | 2.46.3-1.el8_10 |
| alma 9 | webkit2gtk3, webkit2gtk3-devel, webkit2gtk3-jsc ve 1 tane daha | 2.44.3-2.el9 |
| alpine 3.19 | qt6-qtwebengine | 6.6.1-r12 |
| alpine 3.20 | qt5-qtwebengine, qt6-qtwebengine | 5.15.16-r9 ve 1 tane daha |
| alpine 3.21 | qt5-qtwebengine, qt6-qtwebengine | 5.15.17-r0 ve 1 tane daha |
| alpine 3.22 | qt5-qtwebengine, qt6-qtwebengine | 5.15.17-r0 ve 1 tane daha |
| alpine 3.23 | qt5-qtwebengine, qt6-qtwebengine | 5.15.17-r0 ve 1 tane daha |
| alpine 3.24 | qt6-qtwebengine | 6.6.3-r4 |
| alpine edge | qt6-qtwebengine | 6.6.3-r4 |
| chainguard | chromium | 124.0.6367.155-r0 |
| debian 10 | chromium | düzeltme belirtilmemiş |
| debian 11 | chromium, webkit2gtk, wpewebkit | 2.44.3-1~deb11u1 |
30 kaynaktaki 65 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| alma 8 | webkit2gtk3 | 2.46.3-1.el8_10 |
| alma 8 | webkit2gtk3-devel | 2.46.3-1.el8_10 |
| alma 8 | webkit2gtk3-jsc | 2.46.3-1.el8_10 |
| alma 8 | webkit2gtk3-jsc-devel | 2.46.3-1.el8_10 |
| alma 9 | webkit2gtk3 | 2.44.3-2.el9 |
| alma 9 | webkit2gtk3-devel | 2.44.3-2.el9 |
| alma 9 | webkit2gtk3-jsc | 2.44.3-2.el9 |
| alma 9 | webkit2gtk3-jsc-devel | 2.44.3-2.el9 |
| alpine 3.19 | qt6-qtwebengine | 6.6.1-r12 |
| alpine 3.20 | qt5-qtwebengine | 5.15.16-r9 |
| alpine 3.20 | qt6-qtwebengine | 6.6.3-r4 |
| alpine 3.21 | qt5-qtwebengine | 5.15.17-r0 |
| alpine 3.21 | qt6-qtwebengine | 6.6.3-r4 |
| alpine 3.22 | qt5-qtwebengine | 5.15.17-r0 |
| alpine 3.22 | qt6-qtwebengine | 6.6.3-r4 |
| alpine 3.23 | qt5-qtwebengine | 5.15.17-r0 |
| alpine 3.23 | qt6-qtwebengine | 6.6.3-r4 |
| alpine 3.24 | qt6-qtwebengine | 6.6.3-r4 |
| alpine edge | qt6-qtwebengine | 6.6.3-r4 |
| chainguard | chromium | 124.0.6367.155-r0 |
| debian 10 | chromium | düzeltme belirtilmemiş |
| debian 11 | chromium | düzeltme belirtilmemiş |
| debian 11 | webkit2gtk | 2.44.3-1~deb11u1 |
| debian 11 | wpewebkit | düzeltme belirtilmemiş |
| debian 12 | chromium | 124.0.6367.155-1~deb12u1 |
| debian 12 | webkit2gtk | 2.44.3-1~deb12u1 |
| debian 12 | wpewebkit | düzeltme belirtilmemiş |
| debian 13 | chromium | 124.0.6367.155-1 |
| debian 13 | webkit2gtk | 2.44.3-1 |
| debian 13 | wpewebkit | 2.44.3-1 |
| debian 14 | chromium | 124.0.6367.155-1 |
| debian 14 | webkit2gtk | 2.44.3-1 |
| debian 14 | wpewebkit | 2.44.3-1 |
| echo | chromium | 124.0.6367.155-1~deb12u1 |
| echo | webkit2gtk | 2.44.3-1~deb12u1 |
| echo | wpewebkit | 2.44.3-1 |
| Oracle Linux 8 | webkit2gtk3 | 2.46.3-1.el8_10 |
| Oracle Linux 8 | webkit2gtk3-devel | 2.46.3-1.el8_10 |
| Oracle Linux 8 | webkit2gtk3-jsc | 2.46.3-1.el8_10 |
| Oracle Linux 8 | webkit2gtk3-jsc-devel | 2.46.3-1.el8_10 |
| Oracle Linux 9 | webkit2gtk3 | 2.44.3-2.el9 |
| Oracle Linux 9 | webkit2gtk3-devel | 2.44.3-2.el9 |
| Oracle Linux 9 | webkit2gtk3-jsc | 2.44.3-2.el9 |
| Oracle Linux 9 | webkit2gtk3-jsc-devel | 2.44.3-2.el9 |
| rapidfort alpine 3.21 | qt5-qtwebengine | 5.15.17-r0 |
| rapidfort alpine 3.22 | qt5-qtwebengine | 5.15.17-r0 |
| rapidfort alpine 3.23 | qt5-qtwebengine | 5.15.17-r0 |
| rapidfort alpine 3.24 | qt5-qtwebengine | 5.15.17-r0 |
| rapidfort debian 12 | wpewebkit | 0:2.44.3-1 |
| rapidfort debian 13 | wpewebkit | 0:2.44.3-1 |
| rapidfort Oracle Linux 9 | webkit2gtk3 | 0:2.44.3-2.el9 |
| rapidfort Oracle Linux 9 | webkit2gtk3-devel | 0:2.44.3-2.el9 |
| rapidfort Oracle Linux 9 | webkit2gtk3-jsc | 0:2.44.3-2.el9 |
| rapidfort Oracle Linux 9 | webkit2gtk3-jsc-devel | 0:2.44.3-2.el9 |
| Red Hat | libwebkit2gtk | düzeltme belirtilmemiş |
| Red Hat | webkitgtk3 | düzeltme belirtilmemiş |
| Red Hat | webkitgtk3-devel | düzeltme belirtilmemiş |
| Red Hat | webkitgtk3-doc | düzeltme belirtilmemiş |
| rocky 8 | webkit2gtk3 | 2.46.3-1.el8_10 |
| rocky 8 | webkit2gtk3-devel | 2.46.3-1.el8_10 |
| rocky 8 | webkit2gtk3-jsc | 2.46.3-1.el8_10 |
| rocky 8 | webkit2gtk3-jsc-devel | 2.46.3-1.el8_10 |
| ubuntu 22.04 | webkit2gtk | 2.44.3-0ubuntu0.22.04.1 |
| ubuntu 24.04 | webkit2gtk | 2.44.3-0ubuntu0.24.04.1 |
| wolfi | chromium | 124.0.6367.155-r0 |
Referanslar
- http://seclists.org/fulldisclosure/2024/Jul/15
- http://seclists.org/fulldisclosure/2024/Jul/16
- http://seclists.org/fulldisclosure/2024/Jul/18
- https://access.redhat.com/errata/RHSA-2024:9144
- https://access.redhat.com/errata/RHSA-2024:9636
- https://access.redhat.com/security/cve/CVE-2024-4558
- https://bugzilla.redhat.com/2271717
- https://bugzilla.redhat.com/2271718
57 referansın hepsi
- https://bugzilla.redhat.com/2271719
- https://bugzilla.redhat.com/2279689
- https://bugzilla.redhat.com/show_bug.cgi?id=2279689
- https://bugzilla.redhat.com/show_bug.cgi?id=2302067
- https://bugzilla.redhat.com/show_bug.cgi?id=2302069
- https://bugzilla.redhat.com/show_bug.cgi?id=2302070
- https://bugzilla.redhat.com/show_bug.cgi?id=2302071
- https://bugzilla.redhat.com/show_bug.cgi?id=2312724
- https://bugzilla.redhat.com/show_bug.cgi?id=2314696
- https://bugzilla.redhat.com/show_bug.cgi?id=2314698
- https://bugzilla.redhat.com/show_bug.cgi?id=2314702
- https://bugzilla.redhat.com/show_bug.cgi?id=2314704
- https://bugzilla.redhat.com/show_bug.cgi?id=2314706
- https://bugzilla.redhat.com/show_bug.cgi?id=2323263
- https://bugzilla.redhat.com/show_bug.cgi?id=2323278
- https://bugzilla.redhat.com/show_bug.cgi?id=2323289
- https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_7.html
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23271
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27820
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27838
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27851
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40779
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40780
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40782
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40789
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40866
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44185
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44187
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44244
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44296
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4558
- https://errata.almalinux.org/9/ALSA-2024-9144.html
- https://errata.rockylinux.org/RLSA-2024:9636
- https://issues.chromium.org/issues/337766133
- https://linux.oracle.com/cve/CVE-2024-4558.html
- https://linux.oracle.com/errata/ELSA-2024-9636.html
- https://lists.debian.org/debian-lts-announce/2024/09/msg00006.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BWFSZNNWSQYDRYKNLBDGEXXKMBXDYQ3F/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FAWEKDQTHPN7NFEMLIWP7YMIZ2DHF36N/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/
- https://nvd.nist.gov/vuln/detail/CVE-2024-4558
- https://support.apple.com/kb/HT214117
- https://support.apple.com/kb/HT214119
- https://support.apple.com/kb/HT214121
- https://ubuntu.com/security/notices/USN-6996-1
- https://www.cve.org/CVERecord?id=CVE-2024-4558