CVE-2021-30984

Published: Aug 24, 2021Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.6 / Impact: 5.9

Source: NVD

Description

A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Affected (10)

Products: Apple: Ipados, Iphone Os, Macos, Safari, Tvos, Watchos · Fedoraproject: Fedora · Debian: Debian Linux

6 products

1 product

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 15.2
Apple Iphone Os	Before 15.2
Apple Macos	Before 12.1
Apple Safari	Before 15.2
Apple Tvos	Before 15.2
Apple Watchos	Before 8.3

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 34
Fedoraproject Fedora	Version 35

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 11.0

Related CWEs

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (20)

http://www.openwall.com/lists/oss-security/2022/01/21/2

Source: product-security@apple.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/

Source: product-security@apple.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/

Source: product-security@apple.com

https://support.apple.com/en-us/HT212975

Source: product-security@apple.com

https://support.apple.com/en-us/HT212976

Source: product-security@apple.com

https://support.apple.com/en-us/HT212978

Source: product-security@apple.com

https://support.apple.com/en-us/HT212980

Source: product-security@apple.com

https://support.apple.com/en-us/HT212982

Source: product-security@apple.com

https://www.debian.org/security/2022/dsa-5060

Source: product-security@apple.com

https://www.debian.org/security/2022/dsa-5061

Source: product-security@apple.com

http://www.openwall.com/lists/oss-security/2022/01/21/2

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/en-us/HT212975

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/en-us/HT212976

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/en-us/HT212978

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/en-us/HT212980

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/en-us/HT212982

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.debian.org/security/2022/dsa-5060

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.debian.org/security/2022/dsa-5061

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.