CVE-2021-1871 Affecting webkit2gtk package, versions <2.32.0-r0


Severity

Recommended
0.0
critical
0
10

Snyk's Security Team recommends NVD's CVSS assessment. Learn more

Threat Intelligence

Exploit Maturity
Mature
EPSS
1.17% (86th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-ALPINE320-WEBKIT2GTK-7015182
  • published23 May 2024
  • disclosed2 Apr 2021

Introduced: 2 Apr 2021

CVE-2021-1871  (opens in a new tab)

How to fix?

Upgrade Alpine:3.20 webkit2gtk to version 2.32.0-r0 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream webkit2gtk package and not the webkit2gtk package as distributed by Alpine. See How to fix? for Alpine:3.20 relevant fixed versions and status.

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

CVSS Scores

version 3.1