NVD Vulnerability Detail

CVE-2021-30936

Summary	A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
Publication Date	Aug. 25, 2021, 4:15 a.m.
Registration Date	Aug. 25, 2021, 10:01 a.m.
Last Update	Nov. 21, 2024, 3:04 p.m.

Affected software configurations

Configuration2		or higher	or less	more than	less than
cpe:2.3:o:fedoraproject:fedora:34:::::::*

Related information, measures and tools

No	URL	refsource	タグ
1	http://www.openwall.com/lists/oss-security/2022/01/21/2
2	http://www.openwall.com/lists/oss-security/2022/01/21/2
3	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/
4	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/
5	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/
6	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/
7	https://support.apple.com/en-us/HT212975
8	https://support.apple.com/en-us/HT212975
9	https://support.apple.com/en-us/HT212976
10	https://support.apple.com/en-us/HT212976
11	https://support.apple.com/en-us/HT212978
12	https://support.apple.com/en-us/HT212978
13	https://support.apple.com/en-us/HT212980
14	https://support.apple.com/en-us/HT212980
15	https://support.apple.com/en-us/HT212982
16	https://support.apple.com/en-us/HT212982
17	https://www.debian.org/security/2022/dsa-5060
18	https://www.debian.org/security/2022/dsa-5060
19	https://www.debian.org/security/2022/dsa-5061
20	https://www.debian.org/security/2022/dsa-5061

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-416	解放済みメモリの使用	https://cwe.mitre.org/data/definitions/416.html

JVN Vulnerability Information

アップルの Safari 等複数ベンダの製品における解放済みメモリの使用に関する脆弱性

Title	アップルの Safari 等複数ベンダの製品における解放済みメモリの使用に関する脆弱性
Summary	アップルの Safari 等複数ベンダの製品には、解放済みメモリの使用に関する脆弱性が存在します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Aug. 24, 2021, midnight
Registration Date	July 18, 2024, 5:50 p.m.
Last Update	July 18, 2024, 5:50 p.m.

Affected System

アップル

iOS 15.2 未満

iPadOS 15.2 未満

macOS 12.0 以上 12.1 未満

Safari 15.2 未満

tvOS 15.2 未満

watchOS 8.3 未満

Debian

Debian GNU/Linux 10.0

Debian GNU/Linux 11.0

Fedora Project

Fedora 34

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2021-30936	https://www.cve.org/CVERecord?id=CVE-2021-30936
National Vulnerability Database (NVD)
2	CVE-2021-30936	https://nvd.nist.gov/vuln/detail/CVE-2021-30936

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-416	https://cwe.mitre.org/data/definitions/416.html

ベンダー情報

No	Name	URL
Apple Security Updates
1	HT212975	https://support.apple.com/en-us/HT212975
2	HT212976	https://support.apple.com/en-us/HT212976
3	HT212978	https://support.apple.com/en-us/HT212978
4	HT212980	https://support.apple.com/en-us/HT212980
5	HT212982	https://support.apple.com/en-us/HT212982
Apple セキュリティアップデート
6	HT212975	https://support.apple.com/ja-jp/HT212975
7	HT212976	https://support.apple.com/ja-jp/HT212976
8	HT212978	https://support.apple.com/ja-jp/HT212978
9	HT212980	https://support.apple.com/ja-jp/HT212980
10	HT212982	https://support.apple.com/ja-jp/HT212982
Debian
11	[SECURITY] [DSA 5060-1] webkit2gtk security update	https://www.debian.org/security/2022/dsa-5060
12	[SECURITY] [DSA 5061-1] wpewebkit security update	https://www.debian.org/security/2022/dsa-5061
Fedora Update Notification
13	FEDORA-2022-25a98f5d55	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/
14	FEDORA-2022-f7366e60cb	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/

その他

No	Name	URL
関連文書
1	www.openwall.com (oss-security/2022/01/21/2)	http://www.openwall.com/lists/oss-security/2022/01/21/2

Change Log

No	Changed Details	Date of change
1	[2024年07月18日] 掲載	July 18, 2024, 5:50 p.m.