Log in Start free

Vulnerability · Published Jul 14, 2020 · Assigned by mitre

CVE-2020-13753

Critical 10.0

In plain English

A critical-severity security flaw in the webkit2gtk package (Alpine). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.3% (higher than 88% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)10.0Critical
Exploit odds (30 days)3.3%top 11.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl. CLONE_NEWUSER could potentially be used to confuse xdg-desktop-portal, which allows access outside the sandbox. TIOCSTI can be used to directly execute commands outside the sandbox by writing to the controlling terminal's input buffer, similar to CVE-2017-5226.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20webkit2gtk2.28.3-r0ALPINE-CVE-2020-13753
Debian:12webkit2gtk2.28.3-1DEBIAN-CVE-2020-13753
Debian:13webkit2gtk2.28.3-1DEBIAN-CVE-2020-13753
Debian:14webkit2gtk2.28.3-1DEBIAN-CVE-2020-13753
Debian:12wpewebkit2.28.3-1DEBIAN-CVE-2020-13753
Debian:13wpewebkit2.28.3-1DEBIAN-CVE-2020-13753
Debian:14wpewebkit2.28.3-1DEBIAN-CVE-2020-13753
Ubuntu:22.04:LTSqtwebkit-opensource-srcno fix listedUBUNTU-CVE-2020-13753
Ubuntu:24.04:LTSqtwebkit-opensource-srcno fix listedUBUNTU-CVE-2020-13753

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References