Debian DSA-5061-1 : wpewebkit - security update

high Nessus Plugin ID 157258

Synopsis

The remote Debian host is missing one or more security-related updates.

Description

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5061 advisory.

- A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution. (CVE-2021-30934)

- A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution. (CVE-2021-30936, CVE-2021-30951)

- An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution. (CVE-2021-30952)

- An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution. (CVE-2021-30953)

- A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution. (CVE-2021-30954)

- A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution. (CVE-2021-30984)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Upgrade the wpewebkit packages.

For the stable distribution (bullseye), these problems have been fixed in version 2.34.4-1~deb11u1.

See Also

https://security-tracker.debian.org/tracker/source-package/wpewebkit

https://www.debian.org/security/2022/dsa-5061

https://security-tracker.debian.org/tracker/CVE-2021-30934

https://security-tracker.debian.org/tracker/CVE-2021-30936

https://security-tracker.debian.org/tracker/CVE-2021-30951

https://security-tracker.debian.org/tracker/CVE-2021-30952

https://security-tracker.debian.org/tracker/CVE-2021-30953

https://security-tracker.debian.org/tracker/CVE-2021-30954

https://security-tracker.debian.org/tracker/CVE-2021-30984

https://packages.debian.org/source/bullseye/wpewebkit

Plugin Details

Severity: High

ID: 157258

File Name: debian_DSA-5061.nasl

Version: 1.3

Type: local

Agent: unix

Published: 1/31/2022

Updated: 5/6/2022

Supported Sensors: Agentless Assessment, Frictionless Assessment Agent, Nessus Agent

Risk Information

VPR

Risk Factor: High

Score: 7.4

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 6.9

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: E:U/RL:OF/RC:C

CVSS Score Source: CVE-2021-30954

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 7.7

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Temporal Vector: E:U/RL:O/RC:C

CVSS Score Source: CVE-2021-30953

Vulnerability Information

CPE: p-cpe:/a:debian:debian_linux:libwpewebkit-1.0-3, p-cpe:/a:debian:debian_linux:libwpewebkit-1.0-dev, p-cpe:/a:debian:debian_linux:libwpewebkit-1.0-doc, p-cpe:/a:debian:debian_linux:wpewebkit-driver, cpe:/o:debian:debian_linux:11.0

Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

Exploit Ease: No known exploits are available

Patch Publication Date: 1/25/2022

Vulnerability Publication Date: 8/24/2021

Reference Information

CVE: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951, CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984

IAVA: 2021-A-0577-S