UBUNTU-CVE-2022-30294

Source
https://ubuntu.com/security/CVE-2022-30294
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-30294.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2022-30294
Upstream
  • CVE-2022-30294
Published
2022-05-06T05:15:00Z
Modified
2026-04-22T13:21:38.481244Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
  • Ubuntu - medium
Summary
[none]
Details

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-30293. Reason: This candidate is a duplicate of CVE-2022-30293. Notes: All CVE users should reference CVE-2022-30293 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

References

Affected packages

Ubuntu:20.04:LTS / webkit2gtk

Package

Name
webkit2gtk
Purl
pkg:deb/ubuntu/webkit2gtk@2.36.2-0ubuntu0.20.04.1?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.36.2-0ubuntu0.20.04.1

Affected versions

2.*
2.26.1-3
2.26.2-1
2.26.3-1ubuntu2
2.26.4-1ubuntu1
2.28.0-1ubuntu2
2.28.1-1
2.28.2-0ubuntu0.20.04.1
2.28.3-0ubuntu0.20.04.1
2.28.4-0ubuntu0.20.04.1
2.30.3-0ubuntu0.20.04.1
2.30.5-0ubuntu0.20.04.1
2.30.6-0ubuntu0.20.04.1
2.32.0-0ubuntu0.20.04.1
2.32.3-0ubuntu0.20.04.1
2.32.4-0ubuntu0.20.04.1
2.34.1-0ubuntu0.20.04.1
2.34.3-0ubuntu0.20.04.1
2.34.4-0ubuntu0.20.04.1
2.34.6-0ubuntu0.20.04.1
2.36.0-0ubuntu0.20.04.3

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "gir1.2-javascriptcoregtk-4.0",
            "binary_version": "2.36.2-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "gir1.2-webkit2-4.0",
            "binary_version": "2.36.2-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "libjavascriptcoregtk-4.0-18",
            "binary_version": "2.36.2-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "libjavascriptcoregtk-4.0-bin",
            "binary_version": "2.36.2-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "libwebkit2gtk-4.0-37",
            "binary_version": "2.36.2-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "libwebkit2gtk-4.0-37-gtk2",
            "binary_version": "2.36.2-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "webkit2gtk-driver",
            "binary_version": "2.36.2-0ubuntu0.20.04.1"
        }
    ]
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-30294.json"

Ubuntu:22.04:LTS / webkit2gtk

Package

Name
webkit2gtk
Purl
pkg:deb/ubuntu/webkit2gtk@2.36.2-0ubuntu0.22.04.1?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.36.2-0ubuntu0.22.04.1

Affected versions

2.*
2.34.0-1ubuntu1
2.34.1-1ubuntu1
2.34.2-1ubuntu1
2.34.3-1
2.35.3-1ubuntu1
2.35.90-1ubuntu1
2.36.0-2ubuntu1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "gir1.2-javascriptcoregtk-4.0",
            "binary_version": "2.36.2-0ubuntu0.22.04.1"
        },
        {
            "binary_name": "gir1.2-javascriptcoregtk-4.1",
            "binary_version": "2.36.2-0ubuntu0.22.04.1"
        },
        {
            "binary_name": "gir1.2-webkit2-4.0",
            "binary_version": "2.36.2-0ubuntu0.22.04.1"
        },
        {
            "binary_name": "gir1.2-webkit2-4.1",
            "binary_version": "2.36.2-0ubuntu0.22.04.1"
        },
        {
            "binary_name": "libjavascriptcoregtk-4.0-18",
            "binary_version": "2.36.2-0ubuntu0.22.04.1"
        },
        {
            "binary_name": "libjavascriptcoregtk-4.0-bin",
            "binary_version": "2.36.2-0ubuntu0.22.04.1"
        },
        {
            "binary_name": "libjavascriptcoregtk-4.1-0",
            "binary_version": "2.36.2-0ubuntu0.22.04.1"
        },
        {
            "binary_name": "libwebkit2gtk-4.0-37",
            "binary_version": "2.36.2-0ubuntu0.22.04.1"
        },
        {
            "binary_name": "libwebkit2gtk-4.1-0",
            "binary_version": "2.36.2-0ubuntu0.22.04.1"
        },
        {
            "binary_name": "webkit2gtk-driver",
            "binary_version": "2.36.2-0ubuntu0.22.04.1"
        }
    ]
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-30294.json"