CVE-2020-13558

Name
CVE-2020-13558
Description
A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page can lead to a use after free.
NVD Severity
high
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Exploit https://talosintelligence.com/vulnerability_reports/TALOS-2020-1172
GENTOO https://security.gentoo.org/glsa/202104-03

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:webkitgtk:webkitgtk:2.30.1:*:*:*:*:*:*:* webkitgtk == None == 2.30.1

Vulnerable and fixed packages

Source package Branch Version Maintainer Status