Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2021-36773 →
DEBIAN-CVE-2021-36773
uBlock Origin before 1.36.2 and nMatrix before 4.4.9 support an arbitrary depth of parameter nesting for strict blocking, which allows crafted web sit...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
uBlock Origin before 1.36.2 and nMatrix before 4.4.9 support an arbitrary depth of parameter nesting for strict blocking, which allows crafted web sites to cause a denial of service (unbounded recursion that can trigger memory consumption and a loss of all blocking functionality).
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
ublock-origin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.37.0+dfsg-1"}]}]
Debian:13
ublock-origin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.37.0+dfsg-1"}]}]
Debian:14
ublock-origin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.37.0+dfsg-1"}]}]
Références
- advisory security-tracker.debian.org