CVE-2020-9951

一、漏洞信息
 漏洞编号：[CVE-2020-9951](https://nvd.nist.gov/vuln/detail/CVE-2020-9951)
 漏洞归属组件：[gjs](https://gitee.com/src-openeuler/gjs)
 漏洞归属的版本：1.54.1,1.66.1,1.66.2,1.71.1,1.75.1
 CVSS V3.0分值：
  BaseScore：8.8 High
  Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
 漏洞简述：
  A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.
 漏洞公开时间：2020-10-17 01:15:17
 漏洞创建时间：2025-11-21 15:16:23
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2020-9951
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
|  | https://www.auscert.org.au/bulletins/ESB-2020.4476/ |  |
|  | https://www.auscert.org.au/bulletins/ESB-2020.4205/ |  |
|  | https://support.apple.com/en-us/HT211935 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1889411 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1903043 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1883304 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1796916 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1876291 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1901221 |  |
|  | https://www.auscert.org.au/bulletins/ESB-2020.4175/ |  |
|  | https://www.auscert.org.au/bulletins/ESB-2021.1866 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1870837 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1860946 |  |
|  | https://security.gentoo.org/glsa/202012-10 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1921151 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1833787 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1871041 |  |
|  | https://www.auscert.org.au/bulletins/ESB-2020.4175.2/ |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1861769 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1700002 |  |
|  | https://secdb.alpinelinux.org/edge/community.yaml |  |
|  | https://vulners.com/cve/CVE-2021-1817 |  |
|  | https://support.apple.com/kb/HT211952 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1671761 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1842229 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=837035 |  |
|  | https://vulners.com/cve/CVE-2019-13012 |  |
|  | https://vulners.com/cve/CVE-2021-30661 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1888407 |  |
|  | https://support.apple.com/en-us/HT211845 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1901214 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1728896 |  |
|  | https://support.apple.com/kb/HT211843 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1881312 |  |
|  | https://packetstormsecurity.com/files/162689/Red-Hat-Security-Advisory-2021-1586-01.html |  |
|  | https://vulners.com/cve/CVE-2020-13543 |  |
|  | https://packetstormsecurity.com/files/160701/Gentoo-Linux-Security-Advisory-202012-10.html |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1883868 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1846376 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1889528 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1919432 |  |
|  | https://www.cybersecurity-help.cz/vdb/SB2021092220 |  |
|  | https://ubuntu.com/security/notices/USN-4648-1 |  |
|  | https://vulners.com/cve/CVE-2021-1826 |  |
|  | https://vulners.com/cve/CVE-2020-13584 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1906499 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1919467 |  |
|  | http://seclists.org/fulldisclosure/2020/Nov/22 |  |
|  | https://packetstormsecurity.com/files/160061/Apple-Security-Advisory-2020-11-13-3.html |  |
|  | https://errata.rockylinux.org/RLSA-2021:1586 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1865718 |  |
|  | https://www.debian.org/security/2020/dsa-4797 |  |
|  | https://vulners.com/cve/CVE-2021-1820 |  |
|  | https://www.auscert.org.au/bulletins/ESB-2021.1820 |  |
|  | http://seclists.org/fulldisclosure/2020/Nov/20 |  |
|  | https://talosintelligence.com/vulnerability_reports/TALOS-2020-1124 |  |
|  | https://errata.almalinux.org/8/ALSA-2021-1586.html |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1728632 |  |
|  | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9951 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1901216 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1901212 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1903568 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2020-9951 |  |
|  | http://seclists.org/fulldisclosure/2020/Nov/18 |  |
|  | https://www.auscert.org.au/bulletins/ESB-2022.0382 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1845660 |  |
|  | https://vulners.com/cve/CVE-2020-9951 |  |
|  | https://support.apple.com/kb/HT211845 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1854290 |  |
|  | https://www.auscert.org.au/bulletins/ESB-2020.3184/ |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1918391 |  |
|  | https://secdb.alpinelinux.org/v3.13/community.yaml |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1464902 |  |
|  | https://access.redhat.com/security/cve/CVE-2020-9951 |  |
|  | https://support.apple.com/HT211845 |  |
|  | http://seclists.org/fulldisclosure/2020/Nov/19 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1765627 |  |
|  | https://support.apple.com/kb/HT211844 |  |
|  | https://webkitgtk.org/security/WSA-2020-0008.html |  |
|  | https://www.ibm.com/support/pages/node/6520474 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1705392 |  |
|  | https://support.apple.com/kb/HT211850 |  |
|  | https://www.auscert.org.au/bulletins/ESB-2021.2711 |  |
|  | https://vulners.com/cve/CVE-2020-9948 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1152037 |  |
|  | https://vulners.com/cve/CVE-2020-16125 |  |
|  | http://www.openwall.com/lists/oss-security/2020/11/23/3 |  |
|  | https://vulners.com/cve/CVE-2020-9983 |  |
|  | https://packetstormsecurity.com/files/159227/Apple-Security-Advisory-2020-09-16-3.html |  |
|  | https://www.auscert.org.au/bulletins/ESB-2021.4058 |  |
|  | https://www.auscert.org.au/bulletins/ESB-2021.2160 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1886822 |  |
|  | https://www.auscert.org.au/bulletins/ESB-2021.1721 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1919429 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1802105 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=1786496 |  |
|  | https://vigilance.fr/vulnerability/WebKit-four-vulnerabilities-33478 |  |
|  | https://www.cybersecurity-help.cz/vdb/SB2021052019 |  |
|  | https://support.apple.com/kb/HT211935 |  |
|  | https://www.auscert.org.au/bulletins/ESB-2020.3181.2/ |  |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  七彩瞬析开源风险感知平台
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

无
</details>
 
二、漏洞分析结构反馈
 影响性分析说明：
  
 openEuler评分：
   
 受影响版本排查(受影响/不受影响)：
  1.master(1.76.3):
2.openEuler-20.03-LTS-SP4(1.66.2):
3.openEuler-22.03-LTS-SP3(1.71.1):
4.openEuler-22.03-LTS-SP4(1.71.1):
5.openEuler-24.03-LTS(1.75.1):
6.openEuler-24.03-LTS-Next(1.75.1):
7.openEuler-24.03-LTS-SP1(1.75.1):
8.openEuler-24.03-LTS-SP2(1.75.1):
9.openEuler-24.03-LTS-SP3(1.75.1):

修复是否涉及abi变化(是/否)：
  1.master(1.76.3):
2.openEuler-20.03-LTS-SP4(1.66.2):
3.openEuler-22.03-LTS-SP3(1.71.1):
4.openEuler-22.03-LTS-SP4(1.71.1):
5.openEuler-24.03-LTS(1.75.1):
6.openEuler-24.03-LTS-Next(1.75.1):
7.openEuler-24.03-LTS-SP1(1.75.1):
8.openEuler-24.03-LTS-SP2(1.75.1):
9.openEuler-24.03-LTS-SP3(1.75.1):

原因说明：
  1.master(1.76.3):
2.openEuler-20.03-LTS-SP4(1.66.2):
3.openEuler-22.03-LTS-SP3(1.71.1):
4.openEuler-22.03-LTS-SP4(1.71.1):
5.openEuler-24.03-LTS(1.75.1):
6.openEuler-24.03-LTS-Next(1.75.1):
7.openEuler-24.03-LTS-SP1(1.75.1):
8.openEuler-24.03-LTS-SP2(1.75.1):
9.openEuler-24.03-LTS-SP3(1.75.1):

src-openEuler/gjs
关闭

内容风险标识

评论 (3)

src-openEuler/gjs关闭 .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2020-9951

评论 (3)

搜索帮助

src-openEuler/gjs
关闭