CVE-2020-11793

一、漏洞信息
 漏洞编号：[CVE-2020-11793](https://nvd.nist.gov/vuln/detail/CVE-2020-11793)
 漏洞归属组件：[PackageKit](https://gitee.com/src-openeuler/PackageKit)
 漏洞归属的版本：1.1.12
 CVSS V3.0分值：
  BaseScore：8.8 High
  Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
 漏洞简述：
  A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash).
 漏洞公开时间：2020-04-17 21:15:12
 漏洞创建时间：2025-11-21 12:06:29
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2020-11793
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1820760 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1876462 |  |
|  | https://vulners.com/cve/CVE-2019-8814 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1829369 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1879557 |  |
|  | https://vulners.com/cve/CVE-2020-9862 |  |
|  | https://vulners.com/cve/CVE-2020-3894 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1876537 |  |
|  | https://vulners.com/cve/CVE-2019-8710 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1833158 |  |
|  | http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00008.html |  |
|  | https://vulners.com/cve/CVE-2019-8808 |  |
|  | https://vulners.com/cve/CVE-2020-9895 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1876523 |  |
|  | https://vulners.com/cve/CVE-2020-15503 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1816686 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1840080 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1844578 |  |
|  | https://vulners.com/cve/CVE-2020-3867 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1876472 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1837406 |  |
|  | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3MQTRC6ITFTVS5R5Z24PMJS6FXJKGRD/ |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1876591 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1876476 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1840788 |  |
|  | https://vulners.com/cve/CVE-2020-9952 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1207179 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1719937 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1879536 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1876607 |  |
|  | https://vulners.com/cve/CVE-2019-8720 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1853477 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1879532 |  |
|  | https://vulners.com/cve/CVE-2020-9803 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1876552 |  |
|  | https://vulners.com/cve/CVE-2020-9807 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1876556 |  |
|  | https://vulners.com/cve/CVE-2019-8820 |  |
|  | https://vulners.com/cve/CVE-2019-8771 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1879563 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1569868 |  |
|  | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UTKY2MWP6PB6TE3ZKOOMKX7HZUCQNYF6/ |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1652178 |  |
|  | https://vulners.com/cve/CVE-2019-8782 |  |
|  | https://vulners.com/cve/CVE-2020-3902 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1868260 |  |
|  | https://vulners.com/cve/CVE-2019-8769 |  |
|  | https://ubuntu.com/security/notices/USN-4331-1 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1832347 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1876617 |  |
|  | https://www.auscert.org.au/bulletins/ESB-2021.0234/ |  |
|  | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K3MQTRC6ITFTVS5R5Z24PMJS6FXJKGRD/ |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1866332 |  |
|  | https://vulners.com/cve/CVE-2021-30761 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1656262 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1876543 |  |
|  | https://vulners.com/cve/CVE-2019-8764 |  |
|  | https://vulners.com/cve/CVE-2019-8783 |  |
|  | https://vulners.com/cve/CVE-2019-8835 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1854734 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1876516 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1873963 |  |
|  | https://www.auscert.org.au/bulletins/ESB-2021.0864 |  |
|  | https://vulners.com/cve/CVE-2020-11793 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1880339 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1847051 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1775345 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1794045 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1837381 |  |
|  | https://vulners.com/cve/CVE-2020-9843 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1820759 |  |
|  | https://www.auscert.org.au/bulletins/ESB-2021.0099/ |  |
|  | https://vulners.com/cve/CVE-2019-8625 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1805929 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1706076 |  |
|  | https://vulners.com/cve/CVE-2020-9806 |  |
|  | https://vulners.com/cve/CVE-2020-9802 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1876553 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1846191 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1879566 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1847061 |  |
|  | https://vulners.com/cve/CVE-2020-9894 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1876522 |  |
|  | https://vulners.com/cve/CVE-2020-3885 |  |
|  | https://www.auscert.org.au/bulletins/ESB-2020.1374/ |  |
|  | https://vulners.com/cve/CVE-2020-3862 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1824362 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1876590 |  |
|  | https://www.auscert.org.au/bulletins/ESB-2022.1025 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2020-11793 |  |
|  | https://vigilance.fr/vulnerability/WebKitGTK-use-after-free-via-Web-Content-32054 |  |
|  | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTKY2MWP6PB6TE3ZKOOMKX7HZUCQNYF6/ |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1876594 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1876473 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1692536 |  |
|  | https://vulners.com/cve/CVE-2019-8811 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1816678 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1837413 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1817143 |  |
|  | https://vulners.com/cve/CVE-2019-8815 |  |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  七彩瞬析开源风险感知平台
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

无
</details>
 
二、漏洞分析结构反馈
 影响性分析说明：
  
 openEuler评分：
   
 受影响版本排查(受影响/不受影响)：
  1.master:
2.openEuler-20.03-LTS-SP4(1.1.12):
3.openEuler-22.03-LTS-SP3(1.1.12):
4.openEuler-22.03-LTS-SP4(1.1.12):
5.openEuler-24.03-LTS:
6.openEuler-24.03-LTS-Next(1.2.8):
7.openEuler-24.03-LTS-SP1(1.2.8):
8.openEuler-24.03-LTS-SP2(1.2.8):
9.openEuler-24.03-LTS-SP3(1.2.8):

修复是否涉及abi变化(是/否)：
  1.master:
2.openEuler-20.03-LTS-SP4(1.1.12):
3.openEuler-22.03-LTS-SP3(1.1.12):
4.openEuler-22.03-LTS-SP4(1.1.12):
5.openEuler-24.03-LTS:
6.openEuler-24.03-LTS-Next(1.2.8):
7.openEuler-24.03-LTS-SP1(1.2.8):
8.openEuler-24.03-LTS-SP2(1.2.8):
9.openEuler-24.03-LTS-SP3(1.2.8):

原因说明：
  1.master:
2.openEuler-20.03-LTS-SP4(1.1.12):
3.openEuler-22.03-LTS-SP3(1.1.12):
4.openEuler-22.03-LTS-SP4(1.1.12):
5.openEuler-24.03-LTS:
6.openEuler-24.03-LTS-Next(1.2.8):
7.openEuler-24.03-LTS-SP1(1.2.8):
8.openEuler-24.03-LTS-SP2(1.2.8):
9.openEuler-24.03-LTS-SP3(1.2.8):

src-openEuler/PackageKit

内容风险标识

评论 (6)

src-openEuler/PackageKit .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2020-11793

评论 (6)

搜索帮助

src-openEuler/PackageKit