Name: CVE-2020-13558: Use After Free
Creator: Rapid7
Published: 2021-03-03T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2020-13558, CWE-416, CVSS 8.8, EPSS 0.00599

A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page can lead to a use after free.

CVSS Details

CVSS 3.1 Base Score: 8.8
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-horizontal-workspacesUpgrade mutterUpgrade gtk3Upgrade LibRaw-develUpgrade gdmUpgrade gnome-softwareUpgrade gnome-shell-extension-user-themeUpgrade LibRawUpgrade gnome-calculatorUpgrade gnome-online-accountsUpgrade vinoUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-control-center-filesystemUpgrade gtk3-develUpgrade webkit2gtk3-develUpgrade gnome-autoarUpgrade gnome-sessionUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-workspace-indicatorUpgrade accountsservice-develUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-window-grouperUpgrade gnome-session-xsessionUpgrade gnome-software-develUpgrade webkit2gtk3Upgrade accountsserviceUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shellUpgrade gnome-settings-daemonUpgrade gnome-control-centerUpgrade gtk3-immodule-ximUpgrade gsettings-desktop-schemasUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-launch-new-instanceUpgrade gsettings-desktop-schemas-develUpgrade gnome-classic-sessionUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-session-wayland-sessionUpgrade accountsservice-libsUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-dash-to-dockUpgrade mutter-develUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-updates-dialog	May 4, 2022	Mar 3, 2021
Alpine Linux	—	Upgrade webkit2gtk	Aug 22, 2024	Mar 3, 2021
Centos_linux	—	Upgrade gnome-shell-debugsourceUpgrade accountsservice-libs-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade mutterUpgrade gnome-session-debugsourceUpgrade gnome-softwareUpgrade accountsserviceUpgrade LibRaw-debugsourceUpgrade webkit2gtk3Upgrade gnome-shell-debuginfoUpgrade gnome-autoar-debuginfoUpgrade gsettings-desktop-schemasUpgrade gnome-calculator-debugsourceUpgrade gnome-control-centerUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-software-debugsourceUpgrade gtk3-immodule-ximUpgrade gsettings-desktop-schemas-develUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-control-center-debuginfoUpgrade gnome-shell-extension-window-listUpgrade webkit2gtk3-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade gnome-calculatorUpgrade gnome-shell-extension-apps-menuUpgrade gnome-sessionUpgrade mutter-tests-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gnome-shell-extension-systemMonitorUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-software-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gnome-shell-extension-top-iconsUpgrade gdm-debuginfoUpgrade LibRawUpgrade gnome-autoar-debugsourceUpgrade gtk3-devel-debuginfoUpgrade accountsservice-debugsourceUpgrade gnome-shell-extension-auto-move-windowsUpgrade LibRaw-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade accountsservice-debuginfoUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-autoarUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-window-grouperUpgrade gtk3Upgrade accountsservice-libsUpgrade gtk3-immodules-debuginfoUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-classic-sessionUpgrade gdmUpgrade gnome-session-xsessionUpgrade gtk3-develUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-online-accounts-develUpgrade gnome-calculator-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-session-debuginfoUpgrade webkit2gtk3-jscUpgrade mutter-debugsourceUpgrade gtk3-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-online-accounts-debugsourceUpgrade gnome-shell-extension-places-menuUpgrade vino-debuginfoUpgrade gtk3-tests-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade vinoUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gtk3-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-settings-daemonUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gdm-debugsourceUpgrade gnome-online-accountsUpgrade gnome-shell-extension-user-themeUpgrade vino-debugsourceUpgrade gtk3-immodule-xim-debuginfoUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-desktop-iconsUpgrade mutter-debuginfoUpgrade LibRaw-samples-debuginfoUpgrade gnome-shellUpgrade webkit2gtk3-jsc-devel	Nov 10, 2021	Mar 3, 2021
Debian	—	Upgrade wpewebkitUpgrade webkit2gtk	Feb 19, 2021	Feb 19, 2021
Gentoo Linux	—	Upgrade net-libs/webkit-gtk.	May 3, 2021	Mar 3, 2021
Oracle Solaris	—	Upgrade library/desktop/webkitgtk4 to version 2.30.5-11.4.32.0.1.88.2 on Solaris 11.4	Apr 21, 2021	Mar 3, 2021
Oracle_linux	—	Upgrade gnome-shell-extension-top-iconsUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-control-centerUpgrade gnome-autoarUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-window-listUpgrade LibRaw-develUpgrade gnome-softwareUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-disable-screenshieldUpgrade accountsservice-develUpgrade gnome-shell-extension-workspace-indicatorUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-calculatorUpgrade LibRawUpgrade gnome-shell-extension-dash-to-dockUpgrade mutter-develUpgrade gnome-online-accountsUpgrade webkit2gtk3-develUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-auto-move-windowsUpgrade mutterUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-places-menuUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-desktop-iconsUpgrade vinoUpgrade gnome-shell-extension-windowsNavigatorUpgrade accountsservice-libsUpgrade gnome-control-center-filesystemUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-commonUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-user-themeUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-software-develUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-sessionUpgrade gtk3Upgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-window-grouperUpgrade gtk3-develUpgrade gnome-shellUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-drive-menuUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-panel-favoritesUpgrade gdmUpgrade webkit2gtk3Upgrade gnome-session-wayland-sessionUpgrade gnome-settings-daemonUpgrade accountsservice	Nov 17, 2021	Feb 15, 2021
Redhat_linux	—	Upgrade LibRaw-develUpgrade LibRawUpgrade mutterUpgrade gnome-shell-extension-disable-screenshieldUpgrade accountsservice-libs-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gnome-softwareUpgrade gnome-autoarUpgrade gnome-shell-extension-drive-menuUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade gnome-calculator-debuginfoUpgrade accountsservice-develUpgrade gnome-software-debuginfoUpgrade gnome-online-accountsUpgrade LibRaw-debuginfoUpgrade gnome-shell-extension-gesture-inhibitorUpgrade webkitgtk4-docUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-autoar-debuginfoUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shell-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade webkit2gtk3-jscUpgrade gnome-shell-debugsourceUpgrade gnome-settings-daemon-debuginfoUpgrade vino-debuginfoUpgrade webkitgtk4-jscUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-window-listUpgrade vinoUpgrade webkitgtk4-debuginfoUpgrade gnome-shell-extension-commonUpgrade gnome-classic-sessionUpgrade gnome-software-debugsourceUpgrade gnome-calculator-debugsourceUpgrade gtk3-debuginfoUpgrade gnome-software-develUpgrade gtk3-develUpgrade LibRaw-samples-debuginfoUpgrade mutter-debugsourceUpgrade gnome-shell-extension-horizontal-workspacesUpgrade accountsservice-debuginfoUpgrade gsettings-desktop-schemasUpgrade gnome-autoar-debugsourceUpgrade gnome-session-debuginfoUpgrade gnome-control-center-debuginfoUpgrade gnome-control-centerUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-workspace-indicatorUpgrade webkit2gtk3-debugsourceUpgrade gtk3-devel-debuginfoUpgrade gnome-shell-extension-windowsNavigatorUpgrade webkitgtk4-develUpgrade webkit2gtk3-devel-debuginfoUpgrade gtk-update-icon-cacheUpgrade LibRaw-debugsourceUpgrade accountsserviceUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-user-themeUpgrade gnome-session-wayland-sessionUpgrade gtk3-immodules-debuginfoUpgrade gnome-online-accounts-debugsourceNo solution existsUpgrade mutter-develUpgrade accountsservice-libsUpgrade gnome-shell-extension-apps-menuUpgrade webkitgtk4Upgrade gnome-shell-extension-updates-dialogUpgrade gtk3-debugsourceUpgrade mutter-debuginfoUpgrade gnome-shell-extension-places-menuUpgrade gdmUpgrade webkit2gtk3-debuginfoUpgrade gdm-debuginfoUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-systemMonitorUpgrade gdm-debugsourceUpgrade accountsservice-debugsourceUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shellUpgrade webkitgtk4-jsc-develUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-session-xsessionUpgrade gtk3Upgrade mutter-tests-debuginfoUpgrade webkit2gtk3Upgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-control-center-debugsourceUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-native-window-placementUpgrade vino-debugsourceUpgrade gnome-calculatorUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-session-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade gnome-sessionUpgrade gnome-settings-daemonUpgrade gtk3-tests-debuginfo	Nov 10, 2021	Mar 3, 2021
Rocky_linux	—	Upgrade webkit2gtk3Upgrade gnome-shell-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade gnome-shell-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade vino-debuginfoUpgrade webkit2gtk3-jscUpgrade gnome-softwareUpgrade gdmUpgrade gnome-session-xsessionUpgrade mutter-develUpgrade gnome-settings-daemon-debuginfoUpgrade gtk3-debugsourceUpgrade accountsservice-debugsourceUpgrade mutter-debugsourceUpgrade accountsservice-libs-debuginfoUpgrade gnome-autoar-debuginfoUpgrade gnome-software-develUpgrade webkit2gtk3-jsc-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gsettings-desktop-schemasUpgrade gnome-control-center-debugsourceUpgrade gnome-online-accounts-develUpgrade accountsservice-develUpgrade gnome-shellUpgrade gnome-online-accounts-debugsourceUpgrade gtk3-debuginfoUpgrade vinoUpgrade LibRawUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade webkit2gtk3-develUpgrade gnome-software-debuginfoUpgrade gtk3-immodule-ximUpgrade gnome-online-accountsUpgrade gdm-debuginfoUpgrade gtk3-develUpgrade gnome-session-debugsourceUpgrade accountsservice-libsUpgrade webkit2gtk3-devel-debuginfoUpgrade vino-debugsourceUpgrade mutterUpgrade LibRaw-develUpgrade gtk-update-icon-cacheUpgrade webkit2gtk3-jsc-develUpgrade gnome-settings-daemonUpgrade accountsservice-debuginfoUpgrade gnome-software-debugsourceUpgrade gnome-control-center-debuginfoUpgrade accountsserviceUpgrade LibRaw-debugsourceUpgrade gnome-autoarUpgrade gnome-autoar-debugsourceUpgrade webkit2gtk3-debugsourceUpgrade gnome-session-wayland-sessionUpgrade gnome-sessionUpgrade gnome-calculator-debuginfoUpgrade gnome-calculatorUpgrade gnome-online-accounts-debuginfoUpgrade gnome-calculator-debugsourceUpgrade gdm-debugsourceUpgrade gtk3-devel-debuginfoUpgrade gtk3Upgrade LibRaw-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-session-kiosk-sessionUpgrade gnome-session-debuginfoUpgrade mutter-debuginfoUpgrade gnome-control-center	Mar 12, 2024	Mar 3, 2021
Suse	—	Upgrade typelib-1_0-webkit2-4_0Upgrade webkit2gtk3-develUpgrade libwebkit2gtk-4_0-37Upgrade webkit-jsc-4Upgrade typelib-1_0-webkit2webextension-4_0Upgrade libwebkit2gtk3-langUpgrade libjavascriptcoregtk-4_0-18Upgrade libjavascriptcoregtk-4_0-18-32bitUpgrade typelib-1_0-javascriptcore-4_0Upgrade webkit2gtk3-minibrowserUpgrade webkit2gtk-4_0-injected-bundlesUpgrade libwebkit2gtk-4_0-37-32bit	Feb 25, 2021	Feb 18, 2021
Ubuntu	—	Upgrade libjavascriptcoregtk-4.0-18Upgrade libwebkit2gtk-4.0-37	Feb 19, 2021	Feb 18, 2021

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence